[Forgot Password]
Login  Register Subscribe

23631

 
 

122183

 
 

98060

 
 

909

 
 

79198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-3929

Date: (C)2012-08-20   (M)2017-11-18 


The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file.

CVSS Score: 6.8Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL





Reference:
SECUNIA-49089
DSA-2471
USN-1479-1
http://ffmpeg.org/
http://git.libav.org/?p=libav.git;a=commit;h=635bcfccd439480003b74a665b5aa7c872c1ad6b
http://git.libav.org/?p=libav.git;a=commitdiff;h=5a396bb3a66a61a68b80f2369d0249729bf85e04
http://libav.org/

CPE    33
cpe:/a:libav:libav:0.5.3
cpe:/a:libav:libav:0.6.2
cpe:/a:libav:libav:0.5.4
cpe:/a:libav:libav:0.6.3
...
CWE    1
CWE-119
OVAL    4
oval:org.secpod.oval:def:302818
oval:org.secpod.oval:def:700904
oval:org.secpod.oval:def:600804
oval:org.secpod.oval:def:700902
...

© 2013 SecPod Technologies