Lucene search

RedhatCVE-2011-4353

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4353

2022-10-0316:15:14

CWE-119

redhat

web.nvd.nist.gov

ffmpeg

libav

denial of service

out-of-bounds read

vp5

vp6

cve-2011-4353

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

8.8

Confidence

High

EPSS

0.006

Percentile

78.4%

JSON

The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream.

Affected configurations

Nvd

Node

ffmpegffmpegMatch0.5

ffmpegffmpegMatch0.5.1

ffmpegffmpegMatch0.5.2

ffmpegffmpegMatch0.5.3

ffmpegffmpegMatch0.5.4

ffmpegffmpegMatch0.5.5

ffmpegffmpegMatch0.6

ffmpegffmpegMatch0.6.1

ffmpegffmpegMatch0.6.2

ffmpegffmpegMatch0.7

ffmpegffmpegMatch0.7.1

ffmpegffmpegMatch0.7.2

ffmpegffmpegMatch0.7.3

ffmpegffmpegMatch0.7.6

ffmpegffmpegMatch0.7.7

ffmpegffmpegMatch0.7.8

ffmpegffmpegMatch0.8.0

ffmpegffmpegMatch0.8.1

ffmpegffmpegMatch0.8.2

ffmpegffmpegMatch0.8.5

ffmpegffmpegMatch0.8.6

ffmpegffmpegMatch0.8.7

Node

libavlibavMatch0.5

libavlibavMatch0.5.1

libavlibavMatch0.5.2

libavlibavMatch0.5.3

libavlibavMatch0.5.4

libavlibavMatch0.5.5

libavlibavMatch0.6

libavlibavMatch0.6.1

libavlibavMatch0.6.2

libavlibavMatch0.6.3

libavlibavMatch0.6.4

libavlibavMatch0.6.5

libavlibavMatch0.7

libavlibavMatch0.7.1

libavlibavMatch0.7.2

VendorProductVersionCPE
ffmpegffmpeg0.7.1cpe:/a:ffmpeg:ffmpeg:0.7.1:::
ffmpegffmpeg0.8.6cpe:/a:ffmpeg:ffmpeg:0.8.6:::
ffmpegffmpeg0.7.2cpe:/a:ffmpeg:ffmpeg:0.7.2:::
ffmpegffmpeg0.8.5cpe:/a:ffmpeg:ffmpeg:0.8.5:::
ffmpegffmpeg0.6.2cpe:/a:ffmpeg:ffmpeg:0.6.2:::
ffmpegffmpeg0.8.7cpe:/a:ffmpeg:ffmpeg:0.8.7:::
ffmpegffmpeg0.5.4cpe:/a:ffmpeg:ffmpeg:0.5.4:::
ffmpegffmpeg0.5.1cpe:/a:ffmpeg:ffmpeg:0.5.1:::
ffmpegffmpeg0.7.6cpe:/a:ffmpeg:ffmpeg:0.7.6:::
ffmpegffmpeg0.7.8cpe:/a:ffmpeg:ffmpeg:0.7.8:::

Vendor	Product	Version	CPE
ffmpeg	ffmpeg	0.7.1	cpe:/a:ffmpeg:ffmpeg:0.7.1:::
ffmpeg	ffmpeg	0.8.6	cpe:/a:ffmpeg:ffmpeg:0.8.6:::
ffmpeg	ffmpeg	0.7.2	cpe:/a:ffmpeg:ffmpeg:0.7.2:::
ffmpeg	ffmpeg	0.8.5	cpe:/a:ffmpeg:ffmpeg:0.8.5:::
ffmpeg	ffmpeg	0.6.2	cpe:/a:ffmpeg:ffmpeg:0.6.2:::
ffmpeg	ffmpeg	0.8.7	cpe:/a:ffmpeg:ffmpeg:0.8.7:::
ffmpeg	ffmpeg	0.5.4	cpe:/a:ffmpeg:ffmpeg:0.5.4:::
ffmpeg	ffmpeg	0.5.1	cpe:/a:ffmpeg:ffmpeg:0.5.1:::
ffmpeg	ffmpeg	0.7.6	cpe:/a:ffmpeg:ffmpeg:0.7.6:::
ffmpeg	ffmpeg	0.7.8	cpe:/a:ffmpeg:ffmpeg:0.7.8:::