Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3952HistoryAug 20, 2012 - 6:55 p.m.
CVE-2011-3952
2012-08-2018:55:02
Debian Security Bug Tracker
security-tracker.debian.org
22
cve-2011-3952
remote attackers
denial of service
arbitrary code execution
kmvc encoded file
application crash
large palette size
unix
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.021
Percentile
89.3%
The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large palette size in a KMVC encoded file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 11 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 999 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
| Debian | 13 | all | ffmpeg | < 7:2.4.1-1 | ffmpeg_7:2.4.1-1_all.deb |
Related
cve
cve
CVE-2011-3952
2012-08-20 18:55:02
nvd
nvd
CVE-2011-3952
2012-08-20 18:55:02
cvelist
cvelist
CVE-2011-3952
2012-08-20 18:00:00
ubuntucve
ubuntucve
CVE-2011-3952
2012-05-22 00:00:00
prion
prion
Code injection
2012-08-20 18:55:00
securityvulns
securityvulns
[SECURITY] [DSA 2494-1] ffmpeg security update
2012-06-17 00:00:00
ffmpeg library multiple security vulnerabilities
2012-06-17 00:00:00
openvas
openvas
Debian Security Advisory DSA 2494-1 (ffmpeg)
2012-08-10 00:00:00
Debian: Security Advisory (DSA-2494-1)
2012-08-10 00:00:00
Ubuntu Update for ffmpeg USN-1479-1
2012-06-19 00:00:00
debian
debian
[SECURITY] [DSA 2494-1] ffmpeg security update
2012-06-14 20:24:18
nessus
nessus
Debian DSA-2494-1 : ffmpeg - several vulnerabilities
2012-06-29 00:00:00
Ubuntu 10.04 LTS : ffmpeg vulnerabilities (USN-1479-1)
2012-06-19 00:00:00
GLSA-201210-06 : Libav: Multiple vulnerabilities
2012-10-22 00:00:00
osv
osv
ffmpeg - several
2012-06-14 00:00:00
ubuntu
ubuntu
FFmpeg vulnerabilities
2012-06-18 00:00:00
Libav vulnerabilities
2012-06-18 00:00:00
gentoo
gentoo
Libav: Multiple vulnerabilities
2012-10-20 00:00:00
FFmpeg: Multiple vulnerabilities
2013-10-25 00:00:00
freebsd
freebsd
gstreamer-ffmpeg -- Multiple vulnerabilities in bundled libav
2013-08-20 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.021
Percentile
89.3%
Related for DEBIANCVE:CVE-2011-3952