CVE-2011-4364 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Ffmpeg

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
2.9%
top 13.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
FfmpegDebian FfmpegLibav
Timeline
PublishedAug 20
Latest updateMay 17

Description

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VMD file, related to corrupted streams.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages4 packages

▶debiandebian/ffmpeg< ffmpeg 7:2.4.1-1 (bookworm)
▶Debianffmpeg/ffmpeg< 7:2.4.1-1+3
▶NVDlibav/libav13 versions+12
▶NVDffmpeg/ffmpeg25 versions+24

🔴Vulnerability Details

2
GHSA
GHSA-m58j-4g2v-78p2: Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0↗2022-05-17
▶
OSV
CVE-2011-4364: Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0↗2012-08-20
▶

📋Vendor Advisories

3
Ubuntu
Libav vulnerabilities↗2012-01-17
▶
Ubuntu
FFmpeg vulnerabilities↗2012-01-05
▶
Debian
CVE-2011-4364: ffmpeg - Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0...↗2011
▶