Lucene search

K
cvelistChromeCVELIST:CVE-2011-3952
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-3952

2022-10-0316:15:05
Chrome
www.cve.org
1
decode_init function
kmvc.c
libavcodec
ffmpeg
libav
denial of service
execute arbitrary code
kmvc encoded file

9.5 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.8%

The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large palette size in a KMVC encoded file.

9.5 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.8%