CVE Vulnerabilities

CVE-2011-3973

Published: Oct 02, 2011 | Modified: Nov 07, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, related to the decode_residual_block, check_for_slice, and cavs_decode_frame functions, a different vulnerability than CVE-2011-3362.

Affected Software

Name Vendor Start Version End Version
Ffmpeg Ffmpeg 0.7.1 0.7.1
Ffmpeg Ffmpeg 0.4.5 0.4.5
Ffmpeg Ffmpeg 0.3.2 0.3.2
Ffmpeg Ffmpeg 0.4.7 0.4.7
Ffmpeg Ffmpeg 0.6.1 0.6.1
Ffmpeg Ffmpeg 0.3.3 0.3.3
Ffmpeg Ffmpeg 0.3 0.3
Ffmpeg Ffmpeg 0.4.2 0.4.2
Ffmpeg Ffmpeg 0.5 0.5
Ffmpeg Ffmpeg 0.5.4 0.5.4
Ffmpeg Ffmpeg 0.5.1 0.5.1
Ffmpeg Ffmpeg 0.3.1 0.3.1
Ffmpeg Ffmpeg 0.4.9 0.4.9
Ffmpeg Ffmpeg 0.6 0.6
Ffmpeg Ffmpeg 0.5.3 0.5.3
Ffmpeg Ffmpeg 0.4.4 0.4.4
Ffmpeg Ffmpeg 0.5.2 0.5.2
Ffmpeg Ffmpeg * 0.7.3
Ffmpeg Ffmpeg 0.4.6 0.4.6
Ffmpeg Ffmpeg 0.3.4 0.3.4
Ffmpeg Ffmpeg 0.4.0 0.4.0
Ffmpeg Ffmpeg 0.6.2 0.6.2
Ffmpeg Ffmpeg 0.4.8 0.4.8
Ffmpeg Ffmpeg 0.4.3 0.4.3
Ffmpeg Ffmpeg 0.7.2 0.7.2

References