NVD

Id
10967  
Name
CVE-2011-4579  
Description
The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream, related to "dimensions changed."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2012-08-20  
Modified Date
2012-08-21  
Seq
2011-4579  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61219 10967 CVE-2011-4579 http://ffmpeg.org/  View
61220 10967 CVE-2011-4579 http://git.libav.org/?p=libav.git;a=commit;h=6e24b9488e67849a28e64a8056e05f83cf439229  View
61221 10967 CVE-2011-4579 http://git.videolan.org/?p=ffmpeg.git;a=commit;h=6e24b9488e67849a28e64a8056e05f83cf439229  View
61222 10967 CVE-2011-4579 http://libav.org/  View
61223 10967 CVE-2011-4579 USN-1320-1  View
61224 10967 CVE-2011-4579 USN-1333-1  View
61225 10967 CVE-2011-4579 MDVSA-2012:074  View
61226 10967 CVE-2011-4579 MDVSA-2012:075  View
61227 10967 CVE-2011-4579 MDVSA-2012:076  View
61228 10967 CVE-2011-4579 20111123 NGS00148 Patch Notification: FFmpeg Libavcodec memory corruption remote code execution  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34878 JVNDB-2011-005120 FFmpeg および Libav の libavcodec におけるサービス運用妨害 (メモリ破損) の脆弱性 FFmpeg および Libav の libavcodec 内の SVQ1 デコーダ (svq1dec.c) の svq1_decode_frame 関数には、サービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-4579 52486 CVE-2011-4579 10967 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005120.html 2011-12-25 2012-08-22 View