6.8
CVSSv2

CVE-2011-1931

Published: 07/07/2011 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg prior to 0.6.3 and libav up to and including 0.6.2, as used in VideoLAN VLC media player 1.1.9 and previous versions and other products, performs a write operation outside the bounds of an unspecified array, which allows remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed AMV file.

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg

ffmpeg ffmpeg 0.3

ffmpeg ffmpeg 0.3.1

ffmpeg ffmpeg 0.3.2

ffmpeg ffmpeg 0.3.3

ffmpeg ffmpeg 0.3.4

ffmpeg ffmpeg 0.4.0

ffmpeg ffmpeg 0.4.2

ffmpeg ffmpeg 0.4.3

ffmpeg ffmpeg 0.4.4

ffmpeg ffmpeg 0.4.5

ffmpeg ffmpeg 0.4.6

ffmpeg ffmpeg 0.4.7

ffmpeg ffmpeg 0.4.8

ffmpeg ffmpeg 0.4.9

ffmpeg ffmpeg 0.5

ffmpeg ffmpeg 0.5.1

ffmpeg ffmpeg 0.5.2

ffmpeg ffmpeg 0.5.3

ffmpeg ffmpeg 0.5.4

ffmpeg ffmpeg 0.6

ffmpeg ffmpeg 0.6.1

libav libav

libav libav 0.3

libav libav 0.3.1

libav libav 0.3.2

libav libav 0.3.3

libav libav 0.3.4

libav libav 0.4.0

libav libav 0.4.1

libav libav 0.4.2

libav libav 0.4.3

libav libav 0.4.4

libav libav 0.4.5

libav libav 0.4.6

libav libav 0.4.7

libav libav 0.4.8

libav libav 0.4.9

libav libav 0.5

libav libav 0.5.4

libav libav 0.6

libav libav 0.6.1

videolan vlc_media_player

videolan vlc_media_player 0.1.99b

videolan vlc_media_player 0.1.99e

videolan vlc_media_player 0.1.99f

videolan vlc_media_player 0.1.99g

videolan vlc_media_player 0.1.99h

videolan vlc_media_player 0.1.99i

videolan vlc_media_player 0.2.0

videolan vlc_media_player 0.2.60

videolan vlc_media_player 0.2.61

videolan vlc_media_player 0.2.62

videolan vlc_media_player 0.2.63

videolan vlc_media_player 0.2.70

videolan vlc_media_player 0.2.71

videolan vlc_media_player 0.2.72

videolan vlc_media_player 0.2.73

videolan vlc_media_player 0.2.80

videolan vlc_media_player 0.2.81

videolan vlc_media_player 0.2.82

videolan vlc_media_player 0.2.83

videolan vlc_media_player 0.2.90

videolan vlc_media_player 0.2.91

videolan vlc_media_player 0.2.92

videolan vlc_media_player 0.3.0

videolan vlc_media_player 0.3.1

videolan vlc_media_player 0.4.0

videolan vlc_media_player 0.4.1

videolan vlc_media_player 0.4.2

videolan vlc_media_player 0.4.3

videolan vlc_media_player 0.4.4

videolan vlc_media_player 0.4.5

videolan vlc_media_player 0.4.6

videolan vlc_media_player 0.5.0

videolan vlc_media_player 0.5.1

videolan vlc_media_player 0.5.2

videolan vlc_media_player 0.5.3

videolan vlc_media_player 0.6.0

videolan vlc_media_player 0.6.1

videolan vlc_media_player 0.6.2

videolan vlc_media_player 0.7.0

videolan vlc_media_player 0.7.2

videolan vlc_media_player 0.8.0

videolan vlc_media_player 0.8.1

videolan vlc_media_player 0.8.2

videolan vlc_media_player 0.8.4

videolan vlc_media_player 0.8.5

videolan vlc_media_player 0.8.6

videolan vlc_media_player 0.9.2

videolan vlc_media_player 0.9.3

videolan vlc_media_player 0.9.4

videolan vlc_media_player 0.9.5

videolan vlc_media_player 0.9.6

videolan vlc_media_player 0.9.8a

videolan vlc_media_player 0.9.9

videolan vlc_media_player 0.9.10

videolan vlc_media_player 1.0.0

videolan vlc_media_player 1.0.1

videolan vlc_media_player 1.0.2

videolan vlc_media_player 1.0.3

videolan vlc_media_player 1.0.4

videolan vlc_media_player 1.0.5

videolan vlc_media_player 1.0.6

videolan vlc_media_player 1.1.0

videolan vlc_media_player 1.1.1

videolan vlc_media_player 1.1.2

videolan vlc_media_player 1.1.3

videolan vlc_media_player 1.1.4

videolan vlc_media_player 1.1.4.1

videolan vlc_media_player 1.1.5

videolan vlc_media_player 1.1.6

videolan vlc_media_player 1.1.7

videolan vlc_media_player 1.1.8

Vendor Advisories

Libav could be made to run programs as your login if it opened a specially crafted file ...
FFmpeg could be made to run programs as your login if it opened a specially crafted file ...