PT-2011-2586
CVE-2011-0723
·
Published
2011-05-20
·
Updated
2011-10-26
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
FFmpeg versions 0.5.x
Description
The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code via a malformed VC-1 file.
Recommendations
For FFmpeg version 0.5.x, consider updating to a newer version that addresses this issue, as using a malformed VC-1 file could lead to a denial of service or arbitrary code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾