CVE-2011-2162

published 2011-05-20

CVE-2011-2162: Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1…

Priority P3 36 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 (aka CS4.0); and Mandriva Enterprise Server 5 (aka MES5) have unknown impact and attack vectors, related to issues "originally discovered by Google Chrome developers."

Affected

25 ranges

Vendor	Product	Version range	Fixed in
debian	ffmpeg	< ffmpeg 7:2.4.1-1 (bookworm)	ffmpeg 7:2.4.1-1 (bookworm)
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	>= 0 < 7:2.4.1-1	7:2.4.1-1
ffmpeg	ffmpeg	>= 0 < 7:2.4.1-1	7:2.4.1-1
ffmpeg	ffmpeg	>= 0 < 7:2.4.1-1	7:2.4.1-1
ffmpeg	ffmpeg	>= 0 < 7:2.4.1-1	7:2.4.1-1
mandriva	corporate_server	—	—
mandriva	enterprise_server	—	—
mandriva	linux	—	—
mandriva	linux	—	—
mandriva	linux	—	—
mplayerhq	mplayer	—	—

CVSS provenance

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

osv 10.0 CRITICAL

vendor_debian 10.0 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.