6.8

CVE-2011-3362

Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2, and libav through 0.7.1, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Chinese AVS video (aka CAVS) file.

Data is provided by the National Vulnerability Database (NVD)
FfmpegFfmpeg Version <= 0.7.2
FfmpegFfmpeg Version0.3
FfmpegFfmpeg Version0.3.1
FfmpegFfmpeg Version0.3.2
FfmpegFfmpeg Version0.3.3
FfmpegFfmpeg Version0.3.4
FfmpegFfmpeg Version0.4.0
FfmpegFfmpeg Version0.4.2
FfmpegFfmpeg Version0.4.3
FfmpegFfmpeg Version0.4.4
FfmpegFfmpeg Version0.4.5
FfmpegFfmpeg Version0.4.6
FfmpegFfmpeg Version0.4.7
FfmpegFfmpeg Version0.4.8
FfmpegFfmpeg Version0.4.9 Updatepre1
FfmpegFfmpeg Version0.5
FfmpegFfmpeg Version0.5.1
FfmpegFfmpeg Version0.5.2
FfmpegFfmpeg Version0.5.3
FfmpegFfmpeg Version0.5.4
FfmpegFfmpeg Version0.6
FfmpegFfmpeg Version0.6.1
FfmpegFfmpeg Version0.6.2
FfmpegFfmpeg Version0.7.1
FfmpegFfmpeg Version0.8.0
FfmpegFfmpeg Version0.8.1
LibavLibav Version <= 0.7.1
LibavLibav Version0.3
LibavLibav Version0.3.1
LibavLibav Version0.3.2
LibavLibav Version0.3.3
LibavLibav Version0.3.4
LibavLibav Version0.4.0
LibavLibav Version0.4.1
LibavLibav Version0.4.2
LibavLibav Version0.4.3
LibavLibav Version0.4.4
LibavLibav Version0.4.5
LibavLibav Version0.4.6
LibavLibav Version0.4.7
LibavLibav Version0.4.8
LibavLibav Version0.4.9 Updatepre1
LibavLibav Version0.5
LibavLibav Version0.5.4
LibavLibav Version0.6
LibavLibav Version0.6.1
LibavLibav Version0.6.2
LibavLibav Version0.7 Updatebeta1
LibavLibav Version0.7 Updatebeta2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.1% 0.856
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P