Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3945
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-3945

2022-10-0316:15:06
CWE-119
[email protected]
web.nvd.nist.gov
29
cve-2011-3945
remote code execution
crafted media file
denial of service
libavcodec
ffmpeg
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.3 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.8%

JSON

The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted media file.

Affected configurations

NVD
Node
ffmpegffmpegMatch0.7
OR
ffmpegffmpegMatch0.7.1
OR
ffmpegffmpegMatch0.7.2
OR
ffmpegffmpegMatch0.7.3
OR
ffmpegffmpegMatch0.7.6
OR
ffmpegffmpegMatch0.7.7
OR
ffmpegffmpegMatch0.7.8
OR
ffmpegffmpegMatch0.7.9
OR
ffmpegffmpegMatch0.7.11
OR
ffmpegffmpegMatch0.8.0
OR
ffmpegffmpegMatch0.8.1
OR
ffmpegffmpegMatch0.8.2
OR
ffmpegffmpegMatch0.8.5
OR
ffmpegffmpegMatch0.8.6
OR
ffmpegffmpegMatch0.8.7
OR
ffmpegffmpegMatch0.8.8
OR
ffmpegffmpegMatch0.8.10
Node
libavlibavMatch0.5
OR
libavlibavMatch0.5.1
OR
libavlibavMatch0.5.2
OR
libavlibavMatch0.5.3
OR
libavlibavMatch0.5.4
OR
libavlibavMatch0.5.5
OR
libavlibavMatch0.5.6
OR
libavlibavMatch0.5.7
OR
libavlibavMatch0.6
OR
libavlibavMatch0.6.1
OR
libavlibavMatch0.6.2
OR
libavlibavMatch0.6.3
OR
libavlibavMatch0.6.4
OR
libavlibavMatch0.6.5
OR
libavlibavMatch0.7
OR
libavlibavMatch0.7beta1
OR
libavlibavMatch0.7beta2
OR
libavlibavMatch0.7.1
OR
libavlibavMatch0.7.2
OR
libavlibavMatch0.7.3
OR
libavlibavMatch0.7.4
OR
libavlibavMatch0.8
OR
libavlibavMatch0.8beta2

Related

debiancve 1
prion 1
ubuntucve 1
cvelist 1
nvd 1
openvas 7
nessus 5
gentoo 2
ubuntu 1
freebsd 1
debiancve
debiancve
CVE-2011-3945
2022-10-03 16:15:06
prion
prion
Design/Logic Flaw
2012-08-20 20:55:00
ubuntucve
ubuntucve
CVE-2011-3945
2012-05-22 00:00:00
cvelist
cvelist
CVE-2011-3945
2022-10-03 16:15:06
nvd
nvd
CVE-2011-3945
2012-08-20 20:55:02
openvas
openvas
Gentoo Security Advisory GLSA 201210-06 (libav)
2012-10-22 00:00:00
Gentoo Security Advisory GLSA 201210-06 (libav)
2012-10-22 00:00:00
Ubuntu Update for libav USN-1478-1
2012-06-19 00:00:00
nessus
nessus
GLSA-201210-06 : Libav: Multiple vulnerabilities
2012-10-22 00:00:00
Ubuntu 11.04 / 11.10 / 12.04 LTS : libav vulnerabilities (USN-1478-1)
2012-06-19 00:00:00
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2012:076)
2012-09-06 00:00:00
gentoo
gentoo
Libav: Multiple vulnerabilities
2012-10-20 00:00:00
FFmpeg: Multiple vulnerabilities
2013-10-25 00:00:00
ubuntu
ubuntu
Libav vulnerabilities
2012-06-18 00:00:00
freebsd
freebsd
gstreamer-ffmpeg -- Multiple vulnerabilities in bundled libav
2013-08-20 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.3 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.8%

JSON
Related for CVE-2011-3945
debiancve1prion1ubuntucve1cvelist1nvd1openvas7nessus5gentoo2ubuntu1freebsd1