CVE-2011-1931 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	6.8 UNKNOWN	NETWORK	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P
redhat	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 82%

Vendor	Product	Version
ffmpeg	ffmpeg	𝑥 ≤ 0.6.2
ffmpeg	ffmpeg	0.3
ffmpeg	ffmpeg	0.3.1
ffmpeg	ffmpeg	0.3.2
ffmpeg	ffmpeg	0.3.3
ffmpeg	ffmpeg	0.3.4
ffmpeg	ffmpeg	0.4.0
ffmpeg	ffmpeg	0.4.2
ffmpeg	ffmpeg	0.4.3
ffmpeg	ffmpeg	0.4.4
ffmpeg	ffmpeg	0.4.5
ffmpeg	ffmpeg	0.4.6
ffmpeg	ffmpeg	0.4.7
ffmpeg	ffmpeg	0.4.8
ffmpeg	ffmpeg	0.4.9:pre1
ffmpeg	ffmpeg	0.5
ffmpeg	ffmpeg	0.5.1
ffmpeg	ffmpeg	0.5.2
ffmpeg	ffmpeg	0.5.3
ffmpeg	ffmpeg	0.5.4
ffmpeg	ffmpeg	0.6
ffmpeg	ffmpeg	0.6.1
libav	libav	𝑥 ≤ 0.6.2
libav	libav	0.3
libav	libav	0.3.1
libav	libav	0.3.2
libav	libav	0.3.3
libav	libav	0.3.4
libav	libav	0.4.0
libav	libav	0.4.1
libav	libav	0.4.2
libav	libav	0.4.3
libav	libav	0.4.4
libav	libav	0.4.5
libav	libav	0.4.6
libav	libav	0.4.7
libav	libav	0.4.8
libav	libav	0.4.9:pre1
libav	libav	0.5
libav	libav	0.5.4
libav	libav	0.6
libav	libav	0.6.1
videolan	vlc_media_player	𝑥 ≤ 1.1.9
videolan	vlc_media_player	0.1.99b:b
videolan	vlc_media_player	0.1.99e:e
videolan	vlc_media_player	0.1.99f:f
videolan	vlc_media_player	0.1.99g:g
videolan	vlc_media_player	0.1.99h:h
videolan	vlc_media_player	0.1.99i:i
videolan	vlc_media_player	0.2.0
videolan	vlc_media_player	0.2.60
videolan	vlc_media_player	0.2.61
videolan	vlc_media_player	0.2.62
videolan	vlc_media_player	0.2.63
videolan	vlc_media_player	0.2.70
videolan	vlc_media_player	0.2.71
videolan	vlc_media_player	0.2.72
videolan	vlc_media_player	0.2.73
videolan	vlc_media_player	0.2.80
videolan	vlc_media_player	0.2.81
videolan	vlc_media_player	0.2.82
videolan	vlc_media_player	0.2.83
videolan	vlc_media_player	0.2.90
videolan	vlc_media_player	0.2.91
videolan	vlc_media_player	0.2.92
videolan	vlc_media_player	0.3.0
videolan	vlc_media_player	0.3.1
videolan	vlc_media_player	0.4.0
videolan	vlc_media_player	0.4.1
videolan	vlc_media_player	0.4.2
videolan	vlc_media_player	0.4.3
videolan	vlc_media_player	0.4.4
videolan	vlc_media_player	0.4.5
videolan	vlc_media_player	0.4.6
videolan	vlc_media_player	0.5.0
videolan	vlc_media_player	0.5.1
videolan	vlc_media_player	0.5.2
videolan	vlc_media_player	0.5.3
videolan	vlc_media_player	0.6.0
videolan	vlc_media_player	0.6.1
videolan	vlc_media_player	0.6.2
videolan	vlc_media_player	0.7.0
videolan	vlc_media_player	0.7.2
videolan	vlc_media_player	0.8.0
videolan	vlc_media_player	0.8.1
videolan	vlc_media_player	0.8.2
videolan	vlc_media_player	0.8.4
videolan	vlc_media_player	0.8.5
videolan	vlc_media_player	0.8.6
videolan	vlc_media_player	0.9.2
videolan	vlc_media_player	0.9.3
videolan	vlc_media_player	0.9.4
videolan	vlc_media_player	0.9.5
videolan	vlc_media_player	0.9.6
videolan	vlc_media_player	0.9.8a:a
videolan	vlc_media_player	0.9.9
videolan	vlc_media_player	0.9.10
videolan	vlc_media_player	1.0.0
videolan	vlc_media_player	1.0.1
videolan	vlc_media_player	1.0.2
videolan	vlc_media_player	1.0.3
videolan	vlc_media_player	1.0.4
videolan	vlc_media_player	1.0.5
videolan	vlc_media_player	1.0.6
videolan	vlc_media_player	1.1.0
videolan	vlc_media_player	1.1.1
videolan	vlc_media_player	1.1.2
videolan	vlc_media_player	1.1.3
videolan	vlc_media_player	1.1.4
videolan	vlc_media_player	1.1.4.1
videolan	vlc_media_player	1.1.5
videolan	vlc_media_player	1.1.6
videolan	vlc_media_player	1.1.7
videolan	vlc_media_player	1.1.8

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

ffmpeg

bullseye	7:4.3.7-0+deb11u1 fixed
bullseye (security)	7:4.3.8-0+deb11u1 fixed
bookworm	7:5.1.6-0+deb12u1 fixed
bookworm (security)	7:5.1.6-0+deb12u1 fixed
sid	7:7.1-3 fixed
trixie	7:7.1-3 fixed

Ubuntu Releases

Ubuntu Product

Codename

ffmpeg

oneiric	dne
natty	dne
maverick	Fixed 4:0.6-2ubuntu6.2 released
lucid	not-affected
hardy	ignored

ffmpeg-extra

oneiric	dne
natty	dne
maverick	Fixed 4:0.6-2ubuntu3.3 released
lucid	not-affected
hardy	dne

libav

oneiric	not-affected
natty	Fixed 4:0.6.2-1ubuntu1.1 released
maverick	dne
lucid	dne
hardy	dne

libav-extra

oneiric	not-affected
natty	Fixed 4:0.6.4-1ubuntu1 released
maverick	dne
lucid	dne
hardy	dne

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32

http://securityreason.com/securityalert/8299

http://www.securityfocus.com/archive/1/517706

http://www.securityfocus.com/bid/47602

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32

http://securityreason.com/securityalert/8299

http://www.securityfocus.com/archive/1/517706

http://www.securityfocus.com/bid/47602