// For flags

CVE-2011-4353

 

Severity Score

4.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream.

Las funciones (1) av_image_fill_pointers, (2) vp5_parse_coeff, y (3) vp6_parse_coeff en FFmpeg v0.5.x anterior a v0.5.7, v0.6.x anterior a v0.6.4, v0.7.x anterior a v0.7.9, y v0.8.x anterior a v0.8.8; y en Libav v0.5.x anterior a v0.5.6, v0.6.x anterior a v0.6.4, y v0.7.x anterior a v0.7.3 permite a atacantes remotos causar una denegación de servicio (lectura fuera de límites) a través de un (stream) VP5 o VP6 manipulado.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2011-11-04 CVE Reserved
  • 2012-01-03 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.5
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.5.1
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.1"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.5.2
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.2"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.5.3
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.3"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.5.4
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.4"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.5.5
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.5"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.6
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.6"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.6.1
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.6.1"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.6.2
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.6.2"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.7
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.7.1
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.1"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.7.2
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.2"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.7.3
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.3"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.7.6
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.6"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.7.7
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.7"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.7.8
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.8"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.8.0
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.0"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.8.1
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.1"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.8.2
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.2"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.8.5
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.5"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.8.6
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.6"
-
Affected
Ffmpeg
Search vendor "Ffmpeg"
Ffmpeg
Search vendor "Ffmpeg" for product "Ffmpeg"
0.8.7
Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.7"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.5
Search vendor "Libav" for product "Libav" and version "0.5"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.5.1
Search vendor "Libav" for product "Libav" and version "0.5.1"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.5.2
Search vendor "Libav" for product "Libav" and version "0.5.2"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.5.3
Search vendor "Libav" for product "Libav" and version "0.5.3"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.5.4
Search vendor "Libav" for product "Libav" and version "0.5.4"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.5.5
Search vendor "Libav" for product "Libav" and version "0.5.5"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.6
Search vendor "Libav" for product "Libav" and version "0.6"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.6.1
Search vendor "Libav" for product "Libav" and version "0.6.1"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.6.2
Search vendor "Libav" for product "Libav" and version "0.6.2"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.6.3
Search vendor "Libav" for product "Libav" and version "0.6.3"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.6.4
Search vendor "Libav" for product "Libav" and version "0.6.4"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.6.5
Search vendor "Libav" for product "Libav" and version "0.6.5"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.7
Search vendor "Libav" for product "Libav" and version "0.7"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.7.1
Search vendor "Libav" for product "Libav" and version "0.7.1"
-
Affected
Libav
Search vendor "Libav"
Libav
Search vendor "Libav" for product "Libav"
0.7.2
Search vendor "Libav" for product "Libav" and version "0.7.2"
-
Affected