Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3362HistoryOct 02, 2011 - 8:55 p.m.
CVE-2011-3362
2011-10-0220:55:01
Debian Security Bug Tracker
security-tracker.debian.org
16
integer signedness error
decode_residual_block
libavcodec
ffmpeg
denial of service
execute arbitrary code
crafted chinese avs video
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.024
Percentile
90.2%
Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2, and libav through 0.7.1, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Chinese AVS video (aka CAVS) file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 11 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 999 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 13 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
Related
cvelist
cvelist
securityvulns
securityvulns
libavcodec / FFmpeg / MPlayer buffer overflow
2011-08-12 00:00:00
ffmpeg library multiple security vulnerabilities
2011-11-27 00:00:00
prion
prion
Integer overflow
2011-10-02 20:55:00
Design/Logic Flaw
2011-10-02 20:55:00
Integer overflow
2011-10-02 20:55:00
cve
cve
ubuntucve
ubuntucve
nvd
nvd
debiancve
debiancve
CVE-2011-3974
2011-10-02 20:55:01
CVE-2011-3973
2011-10-02 20:55:01
openvas
openvas
Ubuntu Update for libav USN-1209-2
2011-09-23 00:00:00
Ubuntu: Security Advisory (USN-1209-2)
2011-09-23 00:00:00
Ubuntu Update for ffmpeg USN-1209-1
2011-09-23 00:00:00
ubuntu
ubuntu
Libav vulnerabilities
2011-09-19 00:00:00
FFmpeg vulnerabilities
2011-09-19 00:00:00
nessus
nessus
Ubuntu 11.04 : libav vulnerabilities (USN-1209-2)
2011-09-20 00:00:00
Ubuntu 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1209-1)
2011-09-20 00:00:00
Debian DSA-2336-1 : ffmpeg - several vulnerabilities
2011-11-08 00:00:00
osv
osv
ffmpeg - several
2011-11-07 00:00:00
debian
debian
[SECURITY] [DSA 2336-1] ffmpeg security update
2011-11-07 19:17:40
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2013-10-25 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.024
Percentile
90.2%
Related for DEBIANCVE:CVE-2011-3362