Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4031
HistoryMay 09, 2012 - 12:00 a.m.

CVE-2011-4031

2012-05-0900:00:00
ubuntu.com
ubuntu.com
17

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.022

Percentile

89.6%

Integer underflow in the asfrtp_parse_packet function in
libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to
execute arbitrary code via a crafted ASF packet.

Notes

Author Note
mdeslaur ffmpeg-extra in multiverse needs to have matching version libav-extra is built with tarball produced by libav package code not present in ffmpeg 0.5.x libav upstream says 0.6.x is not affected
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchlibav< 4:0.7.6-0ubuntu0.11.10.1UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.022

Percentile

89.6%