Lucene search

K

[email protected]NVD:CVE-2011-3951

HistoryAug 20, 2012 - 6:55 p.m.

CVE-2011-3951

2012-08-2018:55:02

CWE-119

[email protected]

web.nvd.nist.gov

1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.7%

The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file.

Affected configurations

NVD

Node

ffmpegffmpegRange≤0.9.1

OR

ffmpegffmpegMatch0.7.1

OR

ffmpegffmpegMatch0.7.2

OR

ffmpegffmpegMatch0.7.7

OR

ffmpegffmpegMatch0.7.8

OR

ffmpegffmpegMatch0.7.9

OR

ffmpegffmpegMatch0.7.11

OR

ffmpegffmpegMatch0.7.12

OR

ffmpegffmpegMatch0.8.5

OR

ffmpegffmpegMatch0.8.6

OR

ffmpegffmpegMatch0.8.7

OR

ffmpegffmpegMatch0.8.8

OR

ffmpegffmpegMatch0.8.10

OR

ffmpegffmpegMatch0.8.11

OR

ffmpegffmpegMatch0.9

Node

libavlibavMatch0.5

OR

libavlibavMatch0.5.1

OR

libavlibavMatch0.5.2

OR

libavlibavMatch0.5.3

OR

libavlibavMatch0.5.4

OR

libavlibavMatch0.5.5

OR

libavlibavMatch0.5.6

OR

libavlibavMatch0.5.7

OR

libavlibavMatch0.6

OR

libavlibavMatch0.6.1

OR

libavlibavMatch0.6.2

OR

libavlibavMatch0.6.3

OR

libavlibavMatch0.6.4

OR

libavlibavMatch0.6.5

OR

libavlibavMatch0.7

OR

libavlibavMatch0.7.1

OR

libavlibavMatch0.7.2

OR

libavlibavMatch0.7.3

OR

libavlibavMatch0.7.4

OR

libavlibavMatch0.7.5

OR

libavlibavMatch0.8

OR

libavlibavMatch0.8beta2

References

ffmpeg.org/

git.libav.org/?p=libav.git%3Ba=commit%3Bh=ce7aee9b733134649a6ce2fa743e51733f33e67e

libav.org/

www.debian.org/security/2012/dsa-2494

www.ubuntu.com/usn/USN-1479-1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.7%

Related for NVD:CVE-2011-3951

cve1 ubuntucve1 debiancve1 prion1 cvelist1 openvas9 debian1 securityvulns2 osv1 nessus6 ubuntu2 gentoo2 freebsd1