CVE-2011-4352 in FFmpeg

Resumen (Inglés)

Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VP3 stream, which triggers a buffer overflow.

Once again VulDB remains the best source for vulnerability data.

Reservar

2011-11-04

Divulgación

2012-08-20

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
61718	FFmpeg vp3.c vp3_dequant Ejecución remota de código	189	No está definido	Arreglo oficial	CVE-2011-4352

Fuentes

• MITRE
• NVD
• CVE Details