CVE-2011-2160

2011-05-2000:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

67.8%

JSON

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer
and other products, does not properly restrict read operations, which
allows remote attackers to have an unspecified impact via a crafted VC-1
file, a related issue to CVE-2011-0723.

Notes

Author	Note
mdeslaur	ffmpeg-extra in multiverse needs to have matching version we already fixed this as part of CVE-2011-0723

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchffmpeg< 4:0.5.1-1ubuntu1.1UNKNOWN
ubuntu10.04noarchffmpeg-extra< 4:0.5.1-1ubuntu1.1UNKNOWN