Lucene search

K

[email protected]NVD:CVE-2011-3936

HistoryAug 20, 2012 - 6:55 p.m.

CVE-2011-3936

2012-08-2018:55:01

CWE-20

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.8%

The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.

Affected configurations

NVD

Node

ffmpegffmpegMatch0.7

OR

ffmpegffmpegMatch0.7.1

OR

ffmpegffmpegMatch0.7.2

OR

ffmpegffmpegMatch0.7.3

OR

ffmpegffmpegMatch0.7.6

OR

ffmpegffmpegMatch0.7.7

OR

ffmpegffmpegMatch0.7.8

OR

ffmpegffmpegMatch0.7.9

OR

ffmpegffmpegMatch0.7.11

OR

ffmpegffmpegMatch0.7.12

OR

ffmpegffmpegMatch0.8.0

OR

ffmpegffmpegMatch0.8.1

OR

ffmpegffmpegMatch0.8.2

OR

ffmpegffmpegMatch0.8.5

OR

ffmpegffmpegMatch0.8.6

OR

ffmpegffmpegMatch0.8.7

OR

ffmpegffmpegMatch0.8.8

OR

ffmpegffmpegMatch0.8.10

Node

libavlibavMatch0.5

OR

libavlibavMatch0.5.1

OR

libavlibavMatch0.5.2

OR

libavlibavMatch0.5.3

OR

libavlibavMatch0.5.4

OR

libavlibavMatch0.5.5

OR

libavlibavMatch0.5.6

OR

libavlibavMatch0.5.7

OR

libavlibavMatch0.6

OR

libavlibavMatch0.6.1

OR

libavlibavMatch0.6.2

OR

libavlibavMatch0.6.3

OR

libavlibavMatch0.6.4

OR

libavlibavMatch0.6.5

OR

libavlibavMatch0.7

OR

libavlibavMatch0.7beta1

OR

libavlibavMatch0.7beta2

OR

libavlibavMatch0.7.1

OR

libavlibavMatch0.7.2

OR

libavlibavMatch0.7.3

OR

libavlibavMatch0.7.4

OR

libavlibavMatch0.8

OR

libavlibavMatch0.8beta2

References

ffmpeg.org/

git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b

git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=2d1c0dea5f6b91bec7f5fa53ec050913d851e366

libav.org/

secunia.com/advisories/49089

www.debian.org/security/2012/dsa-2471

www.ubuntu.com/usn/USN-1479-1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.8%

Related for NVD:CVE-2011-3936

debiancve1 prion1 cve1 cvelist1 ubuntucve1 nessus7 debian1 openvas11 securityvulns2 osv1 ubuntu2 gentoo2 freebsd1