NVD

Id
10497  
Name
CVE-2011-3940  
Description
nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-08-20  
Modified Date
2012-10-29  
Seq
2011-3940  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59541 10497 CVE-2011-3940 http://ffmpeg.org/  View
59542 10497 CVE-2011-3940 http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5c011706bc752d34bc6ada31d7df2ca0c9af7c6b  View
59543 10497 CVE-2011-3940 http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=8fd8a48263ff1437f9d02d7e78dc63efb9b5ed3a  View
59544 10497 CVE-2011-3940 http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c898431ca5ef2a997fe9388b650f658fb60783e5  View
59545 10497 CVE-2011-3940 http://libav.org/  View
59546 10497 CVE-2011-3940 DSA-2471  View
59547 10497 CVE-2011-3940 USN-1479-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28050 JVNDB-2012-003757 FFmpeg および Libav の libavcodec におけるサービス運用妨害 (DoS) の脆弱性 FFmpeg および Libav の libavcodec 内の nsvdec.c には、サービス運用妨害 (out-of-bounds read および write) 状態となる脆弱性が存在します。 CVE-2011-3940 51847 CVE-2011-3940 10497 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003757.html 2012-01-27 2012-08-22 View