CVE-2011-1931 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 84%

Affected Products (NVD)

Vendor	Product	Version
ffmpeg	ffmpeg	𝑥 ≤ 0.6.2
ffmpeg	ffmpeg	0.3
ffmpeg	ffmpeg	0.3.1
ffmpeg	ffmpeg	0.3.2
ffmpeg	ffmpeg	0.3.3
ffmpeg	ffmpeg	0.3.4
ffmpeg	ffmpeg	0.4.0
ffmpeg	ffmpeg	0.4.2
ffmpeg	ffmpeg	0.4.3
ffmpeg	ffmpeg	0.4.4
ffmpeg	ffmpeg	0.4.5
ffmpeg	ffmpeg	0.4.6
ffmpeg	ffmpeg	0.4.7
ffmpeg	ffmpeg	0.4.8
ffmpeg	ffmpeg	0.4.9:pre1
ffmpeg	ffmpeg	0.5
ffmpeg	ffmpeg	0.5.1
ffmpeg	ffmpeg	0.5.2
ffmpeg	ffmpeg	0.5.3
ffmpeg	ffmpeg	0.5.4
ffmpeg	ffmpeg	0.6
ffmpeg	ffmpeg	0.6.1
libav	libav	𝑥 ≤ 0.6.2
libav	libav	0.3
libav	libav	0.3.1
libav	libav	0.3.2
libav	libav	0.3.3
libav	libav	0.3.4
libav	libav	0.4.0
libav	libav	0.4.1
libav	libav	0.4.2
libav	libav	0.4.3
libav	libav	0.4.4
libav	libav	0.4.5
libav	libav	0.4.6
libav	libav	0.4.7
libav	libav	0.4.8
libav	libav	0.4.9:pre1
libav	libav	0.5
libav	libav	0.5.4
libav	libav	0.6
libav	libav	0.6.1
videolan	vlc_media_player	𝑥 ≤ 1.1.9
videolan	vlc_media_player	0.1.99b:b
videolan	vlc_media_player	0.1.99e:e
videolan	vlc_media_player	0.1.99f:f
videolan	vlc_media_player	0.1.99g:g
videolan	vlc_media_player	0.1.99h:h
videolan	vlc_media_player	0.1.99i:i
videolan	vlc_media_player	0.2.0
videolan	vlc_media_player	0.2.60
videolan	vlc_media_player	0.2.61
videolan	vlc_media_player	0.2.62
videolan	vlc_media_player	0.2.63
videolan	vlc_media_player	0.2.70
videolan	vlc_media_player	0.2.71
videolan	vlc_media_player	0.2.72
videolan	vlc_media_player	0.2.73
videolan	vlc_media_player	0.2.80
videolan	vlc_media_player	0.2.81
videolan	vlc_media_player	0.2.82
videolan	vlc_media_player	0.2.83
videolan	vlc_media_player	0.2.90
videolan	vlc_media_player	0.2.91
videolan	vlc_media_player	0.2.92
videolan	vlc_media_player	0.3.0
videolan	vlc_media_player	0.3.1
videolan	vlc_media_player	0.4.0
videolan	vlc_media_player	0.4.1
videolan	vlc_media_player	0.4.2
videolan	vlc_media_player	0.4.3
videolan	vlc_media_player	0.4.4
videolan	vlc_media_player	0.4.5
videolan	vlc_media_player	0.4.6
videolan	vlc_media_player	0.5.0
videolan	vlc_media_player	0.5.1
videolan	vlc_media_player	0.5.2
videolan	vlc_media_player	0.5.3
videolan	vlc_media_player	0.6.0
videolan	vlc_media_player	0.6.1
videolan	vlc_media_player	0.6.2
videolan	vlc_media_player	0.7.0
videolan	vlc_media_player	0.7.2
videolan	vlc_media_player	0.8.0
videolan	vlc_media_player	0.8.1
videolan	vlc_media_player	0.8.2
videolan	vlc_media_player	0.8.4
videolan	vlc_media_player	0.8.5
videolan	vlc_media_player	0.8.6
videolan	vlc_media_player	0.9.2
videolan	vlc_media_player	0.9.3
videolan	vlc_media_player	0.9.4
videolan	vlc_media_player	0.9.5
videolan	vlc_media_player	0.9.6
videolan	vlc_media_player	0.9.8a:a
videolan	vlc_media_player	0.9.9
videolan	vlc_media_player	0.9.10
videolan	vlc_media_player	1.0.0
videolan	vlc_media_player	1.0.1
videolan	vlc_media_player	1.0.2
videolan	vlc_media_player	1.0.3
videolan	vlc_media_player	1.0.4
videolan	vlc_media_player	1.0.5
videolan	vlc_media_player	1.0.6
videolan	vlc_media_player	1.1.0
videolan	vlc_media_player	1.1.1
videolan	vlc_media_player	1.1.2
videolan	vlc_media_player	1.1.3
videolan	vlc_media_player	1.1.4
videolan	vlc_media_player	1.1.4.1
videolan	vlc_media_player	1.1.5
videolan	vlc_media_player	1.1.6
videolan	vlc_media_player	1.1.7
videolan	vlc_media_player	1.1.8

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

ffmpeg

bookworm	7:5.1.6-0+deb12u1 fixed
bookworm (security)	7:5.1.6-0+deb12u1 fixed
bullseye	7:4.3.7-0+deb11u1 fixed
bullseye (security)	7:4.3.8-0+deb11u1 fixed
sid	7:7.1-3 fixed
trixie	7:7.1-3 fixed

Ubuntu Releases

Ubuntu Product

Codename

ffmpeg

hardy	ignored
lucid	not-affected
maverick	Fixed 4:0.6-2ubuntu6.2 released
natty	dne
oneiric	dne

ffmpeg-extra

hardy	dne
lucid	not-affected
maverick	Fixed 4:0.6-2ubuntu3.3 released
natty	dne
oneiric	dne

libav

hardy	dne
lucid	dne
maverick	dne
natty	Fixed 4:0.6.2-1ubuntu1.1 released
oneiric	not-affected

libav-extra

hardy	dne
lucid	dne
maverick	dne
natty	Fixed 4:0.6.4-1ubuntu1 released
oneiric	not-affected

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32

http://securityreason.com/securityalert/8299

http://www.securityfocus.com/archive/1/517706

http://www.securityfocus.com/bid/47602

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32

http://securityreason.com/securityalert/8299

http://www.securityfocus.com/archive/1/517706

http://www.securityfocus.com/bid/47602