PT-2011-2586

CVE-2011-0723

·

Published

2011-05-20

·

Updated

2011-10-26

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.5.x
Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code via a malformed VC-1 file.
Recommendations For FFmpeg version 0.5.x, consider updating to a newer version that addresses this issue, as using a malformed VC-1 file could lead to a denial of service or arbitrary code execution.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
DSA-2306-1
Found an issue in the description? Have something to add? Feel free to write us 👾