6.8
CVSSv2

CVE-2011-3945

Published: 20/08/2012 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x prior to 0.7.12 and 0.8.x prior to 0.8.11, and in Libav 0.5.x prior to 0.5.9, 0.6.x prior to 0.6.6, 0.7.x prior to 0.7.5, and 0.8.x prior to 0.8.1, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted media file.

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg 0.7.7

ffmpeg ffmpeg 0.7.1

ffmpeg ffmpeg 0.7.6

ffmpeg ffmpeg 0.8.6

ffmpeg ffmpeg 0.8.5

ffmpeg ffmpeg 0.7.3

ffmpeg ffmpeg 0.8.0

ffmpeg ffmpeg 0.8.10

ffmpeg ffmpeg 0.7.8

ffmpeg ffmpeg 0.8.7

ffmpeg ffmpeg 0.7.9

ffmpeg ffmpeg 0.7

ffmpeg ffmpeg 0.8.1

ffmpeg ffmpeg 0.8.8

ffmpeg ffmpeg 0.8.2

ffmpeg ffmpeg 0.7.11

ffmpeg ffmpeg 0.7.2

libav libav 0.6.5

libav libav 0.5.6

libav libav 0.7

libav libav 0.5.7

libav libav 0.8

libav libav 0.5.3

libav libav 0.6.2

libav libav 0.5

libav libav 0.7.4

libav libav 0.7.1

libav libav 0.5.2

libav libav 0.5.5

libav libav 0.6.4

libav libav 0.6.3

libav libav 0.7.2

libav libav 0.5.4

libav libav 0.7.3

libav libav 0.6.1

libav libav 0.6

libav libav 0.5.1

Vendor Advisories

Libav could be made to crash or run programs as your login if it opened a specially crafted file ...