CVE-2011-4351 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Ffmpeg

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents6 sources
Severity
7.5HIGHNVD
EPSS
2.8%
top 13.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
FfmpegDebian Ffmpeg
Timeline
PublishedDec 9
Latest updateMay 17

Description

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages3 packages

▶debiandebian/ffmpeg< ffmpeg 7:2.4.1-1 (bookworm)
▶Debianffmpeg/ffmpeg< 7:2.4.1-1+3
▶NVDffmpeg/ffmpeg0.5.5+39

🔴Vulnerability Details

2
GHSA
GHSA-x4w8-wj89-3jff: Buffer overflow in FFmpeg before 0↗2022-05-17
▶
OSV
CVE-2011-4351: Buffer overflow in FFmpeg before 0↗2013-12-09
▶

📋Vendor Advisories

3
Ubuntu
Libav vulnerabilities↗2012-01-17
▶
Ubuntu
FFmpeg vulnerabilities↗2012-01-05
▶
Debian
CVE-2011-4351: ffmpeg - Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, ...↗2011
▶

💬Community

1
Bugzilla
CVE-2010-4351 IcedTea jnlp security manager bypass↗2010-12-16
▶