CVE-2011-3936

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-3936
The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://ffmpeg.org/
http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b
http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=2d1c0dea5f6b91bec7f5fa53ec050913d851e366
http://libav.org/
http://secunia.com/advisories/49089
http://www.debian.org/security/2012/dsa-2471
http://www.ubuntu.com/usn/USN-1479-1
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ffmpeg:ffmpeg:0.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.9:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.11:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.12:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.10:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:libav:libav:0.5:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.3:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.4:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.5:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.6:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.7:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.3:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.4:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.5:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7:beta1:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7:beta2:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.3:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.4:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8:beta2:*:*:*:*:*:*
History

07 Nov 2023, 02:09

Type Values Removed Values Added
References
  • {'url': 'http://git.libav.org/?p=libav.git;a=commit;h=635bcfccd439480003b74a665b5aa7c872c1ad6b', 'name': 'http://git.libav.org/?p=libav.git;a=commit;h=635bcfccd439480003b74a665b5aa7c872c1ad6b', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • {'url': 'http://git.libav.org/?p=libav.git;a=commitdiff;h=2d1c0dea5f6b91bec7f5fa53ec050913d851e366', 'name': 'http://git.libav.org/?p=libav.git;a=commitdiff;h=2d1c0dea5f6b91bec7f5fa53ec050913d851e366', 'tags': ['Exploit', 'Patch'], 'refsource': 'CONFIRM'}
  • () http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b -
  • () http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=2d1c0dea5f6b91bec7f5fa53ec050913d851e366 -
References (DEBIAN) http://www.debian.org/security/2012/dsa-2471 - () http://www.debian.org/security/2012/dsa-2471 -
References (CONFIRM) http://ffmpeg.org/ - () http://ffmpeg.org/ -
References (CONFIRM) http://libav.org/ - () http://libav.org/ -
References (SECUNIA) http://secunia.com/advisories/49089 - () http://secunia.com/advisories/49089 -
References (UBUNTU) http://www.ubuntu.com/usn/USN-1479-1 - () http://www.ubuntu.com/usn/USN-1479-1 -
Information

Published : 2012-08-20 18:55

Updated : 2023-12-10 11:16

NVD link : CVE-2011-3936

Mitre link : CVE-2011-3936

CVE.ORG link : CVE-2011-3936

JSON object : View

Products Affected

libav

  • libav

ffmpeg

  • ffmpeg
CWE
CWE-20

Improper Input Validation