CVE-2011-4351

2011-11-2500:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.033

Percentile

91.4%

JSON

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before
0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary
code via unspecified vectors.

Notes

Author	Note
mdeslaur	ffmpeg-extra in multiverse needs to have matching version libav-extra is built with tarball produced by libav package This fixes NGS00144 As of 2011-12-22, libav is missing the last two commits, but upstream says they aren’t necessary.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchffmpeg< 4:0.5.1-1ubuntu1.3UNKNOWN
ubuntu10.10noarchffmpeg< 4:0.6-2ubuntu6.3UNKNOWN
ubuntu10.04noarchffmpeg-extra< 4:0.5.1-1ubuntu1.3UNKNOWN
ubuntu10.10noarchffmpeg-extra< 4:0.6-2ubuntu3.3UNKNOWN
ubuntu11.04noarchlibav< 4:0.6.4-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchlibav< 4:0.7.3-0ubuntu0.11.10.1UNKNOWN
ubuntu11.04noarchlibav-extra< 4:0.6.4-1ubuntu1UNKNOWN
ubuntu11.10noarchlibav-extra< 4:0.7.3ubuntu0.11.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	ffmpeg	< 4:0.5.1-1ubuntu1.3	UNKNOWN
ubuntu	10.10	noarch	ffmpeg	< 4:0.6-2ubuntu6.3	UNKNOWN
ubuntu	10.04	noarch	ffmpeg-extra	< 4:0.5.1-1ubuntu1.3	UNKNOWN
ubuntu	10.10	noarch	ffmpeg-extra	< 4:0.6-2ubuntu3.3	UNKNOWN
ubuntu	11.04	noarch	libav	< 4:0.6.4-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	libav	< 4:0.7.3-0ubuntu0.11.10.1	UNKNOWN
ubuntu	11.04	noarch	libav-extra	< 4:0.6.4-1ubuntu1	UNKNOWN
ubuntu	11.10	noarch	libav-extra	< 4:0.7.3ubuntu0.11.10.1	UNKNOWN