Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2011-3937

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2011-3937
Last Modified 12 Dec 2013 11:52:31
Published 04 Jan 2013 07:55:02
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2011-3937

Summary

The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to "width/height changing with frame threads."

Vulnerable Systems

Application

  • Ffmpeg 0.3

  • Ffmpeg 0.3.1

  • Ffmpeg 0.3.2

  • Ffmpeg 0.3.3

  • Ffmpeg 0.3.4

  • Ffmpeg 0.4.0

  • Ffmpeg 0.4.2

  • Ffmpeg 0.4.3

  • Ffmpeg 0.4.4

  • Ffmpeg 0.4.5

  • Ffmpeg 0.4.6

  • Ffmpeg 0.4.7

  • Ffmpeg 0.4.8

  • Ffmpeg 0.4.9

  • Ffmpeg 0.4.9 Pre1

  • Ffmpeg 0.5

  • Ffmpeg 0.5.1

  • Ffmpeg 0.5.2

  • Ffmpeg 0.5.3

  • Ffmpeg 0.5.4

  • Ffmpeg 0.5.4.5

  • Ffmpeg 0.5.4.6

  • Ffmpeg 0.6

  • Ffmpeg 0.6.1

  • Ffmpeg 0.6.2

  • Ffmpeg 0.6.3

  • Ffmpeg 0.7

  • Ffmpeg 0.7.1

  • Ffmpeg 0.7.11

  • Ffmpeg 0.7.12

  • Ffmpeg 0.7.2

  • Ffmpeg 0.7.3

  • Ffmpeg 0.7.4

  • Ffmpeg 0.7.5

  • Ffmpeg 0.7.6

  • Ffmpeg 0.7.7

  • Ffmpeg 0.7.8

  • Ffmpeg 0.7.9

  • Ffmpeg 0.8.0

  • Ffmpeg 0.8.1

  • Ffmpeg 0.8.10

  • Ffmpeg 0.8.11

  • Ffmpeg 0.8.2

  • Ffmpeg 0.8.5

  • Ffmpeg 0.8.5.3

  • Ffmpeg 0.8.5.4

  • Ffmpeg 0.8.6

  • Ffmpeg 0.8.7

  • Ffmpeg 0.8.8

  • Ffmpeg 0.9

  • Ffmpeg 0.9.1

  • Libav 0.5

  • Libav 0.5.1

  • Libav 0.5.2

  • Libav 0.5.3

  • Libav 0.5.4

  • Libav 0.5.5

  • Libav 0.5.6

  • Libav 0.5.7

  • Libav 0.5.8

  • Libav 0.6

  • Libav 0.6.1

  • Libav 0.6.2

  • Libav 0.6.3

  • Libav 0.6.4

  • Libav 0.6.5

  • Libav 0.7

  • Libav 0.7.1

  • Libav 0.7.2

  • Libav 0.7.3

  • Libav 0.7.4

  • Libav 0.8


References

CONFIRM - http://libav.org/news.html

CONFIRM - http://git.videolan.org/?p=ffmpeg.git;a=commit;h=71db86d53b5c6872cea31bf714a1a38ec78feaba

CONFIRM - http://git.libav.org/?p=libav.git;a=commit;h=71db86d53b5c6872cea31bf714a1a38ec78feaba

CONFIRM - http://ffmpeg.org/security.html

MANDRIVA - MDVSA-2013:079


Last Updated: 27 May 2016 11:01:34