Published: 20/05/2011 Updated: 26/10/2011

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ffmpeg ffmpeg 0.5.2
ffmpeg ffmpeg 0.5.3
ffmpeg ffmpeg 0.5.4
ffmpeg ffmpeg 0.5.1
mplayer mplayer

FFmpeg could be made to run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #628448 several vulnerabilities: CVE-2011-2162 CVE-2011-2161 CVE-2011-2160 Package: libav; Maintainer for libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Steffen Joeris <white@debianorg> Date: Sun, 29 May 2011 03:27:01 UTC Severity: g ...

CWE-399 http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 http://www.vupen.com/english/advisories/2011/1241 http://www.ubuntu.com/usn/usn-1104-1/http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 http://ffmpeg.mplayerhq.hu/http://www.securityfocus.com/bid/47151 http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 http://www.mandriva.com/security/advisories?name=MDVSA-2011:114 http://www.debian.org/security/2011/dsa-2306 http://www.mandriva.com/security/advisories?name=MDVSA-2011:112 https://usn.ubuntu.com/1104-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-0723

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect