PT-2012-1759 · FFmpeg+1 · Ffmpeg+1

Gynvael Coldwind + 1 · Published 2012-08-20 · Updated 2018-10-30 · CVE-2011-3952

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Libav versions 0.5.x through 0.5.8 Libav versions 0.6.x through 0.6.5 Libav versions 0.7.x through 0.7.5 Libav versions 0.8.x through 0.8.0

Description The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and possibly execute arbitrary code. This is achieved through a large palette size in a KMVC encoded file, exploiting the decode init function in kmvc.c in libavcodec.

Recommendations For FFmpeg versions prior to 0.10, update to version 0.10 or later. For Libav versions 0.5.x through 0.5.8, update to version 0.5.9 or later. For Libav versions 0.6.x through 0.6.5, update to version 0.6.6 or later. For Libav versions 0.7.x through 0.7.5, update to version 0.7.6 or later. For Libav versions 0.8.x through 0.8.0, update to version 0.8.1 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-3952

DSA-2494-1

Affected Products

Ffmpeg

Libav

References · 9

• https://security-tracker.debian.org/tracker/CVE-2011-3952 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3952 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-3952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3952 · Security Note
• http://debian.org/security/2012/dsa-2494 · Vendor Advisory
• http://ubuntu.com/usn/USN-1479-1 · Vendor Advisory
• http://libav.org · Note
• http://ffmpeg.org · Note
• http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=386741f887714d3e46c9e8fe577e326a7964037b · Note