{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-08-20T18:00:00Z", "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome"}, "references": [{"name": "USN-1479-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/USN-1479-1"}, {"name": "DSA-2494", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2012/dsa-2494"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://ffmpeg.org/"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://libav.org/"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=ce7aee9b733134649a6ce2fa743e51733f33e67e"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2011-3951", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "USN-1479-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-1479-1"}, {"name": "DSA-2494", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2012/dsa-2494"}, {"name": "http://ffmpeg.org/", "refsource": "CONFIRM", "url": "http://ffmpeg.org/"}, {"name": "http://libav.org/", "refsource": "CONFIRM", "url": "http://libav.org/"}, {"name": "http://git.libav.org/?p=libav.git;a=commit;h=ce7aee9b733134649a6ce2fa743e51733f33e67e", "refsource": "CONFIRM", "url": "http://git.libav.org/?p=libav.git;a=commit;h=ce7aee9b733134649a6ce2fa743e51733f33e67e"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T23:53:32.287Z"}, "title": "CVE Program Container", "references": [{"name": "USN-1479-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-1479-1"}, {"name": "DSA-2494", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2012/dsa-2494"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://ffmpeg.org/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://libav.org/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=ce7aee9b733134649a6ce2fa743e51733f33e67e"}]}]}, "cveMetadata": {"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "assignerShortName": "Chrome", "cveId": "CVE-2011-3951", "datePublished": "2012-08-20T18:00:00Z", "dateReserved": "2011-10-01T00:00:00Z", "dateUpdated": "2024-09-17T04:20:11.335Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*", "matchCriteriaId": "3A79213F-BAB7-4FF2-99AC-91BFAF4BF2CF", "versionEndIncluding": "0.9.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "07669E0E-8C4B-430E-802F-F64EEA2B5A0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "F3EB7F17-F25D-4E48-8A43-F799619CE71F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.7.7:*:*:*:*:*:*:*", "matchCriteriaId": "AAA31D75-C3FB-4D89-8B2D-21372AAEB78B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.7.8:*:*:*:*:*:*:*", "matchCriteriaId": "B20E5358-826C-47A2-B39F-ED4E9213BA95", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.7.9:*:*:*:*:*:*:*", "matchCriteriaId": "26321888-E140-4F09-AAA0-7392AA7F6307", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.7.11:*:*:*:*:*:*:*", "matchCriteriaId": "7E46B9F3-A9C0-4B8A-A119-40CA4CBBD0EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.7.12:*:*:*:*:*:*:*", "matchCriteriaId": "44800572-71C5-4AA1-9CB6-30AA902B0353", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "CE9D7B73-9CDA-4BAE-8DD9-8E1E34C20648", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "F428A2E4-A54F-4296-A00F-1A4E160253D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "5239E4FA-0359-49F1-93D4-24AB013FAC20", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "F0C8230D-4E89-45F9-B0F7-E317119E0FA0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.8.10:*:*:*:*:*:*:*", "matchCriteriaId": "585CE7D2-1CE8-44AB-AE67-07D7D3721F68", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.8.11:*:*:*:*:*:*:*", "matchCriteriaId": "EE81C339-A794-4303-B829-BE743DF0B132", "vulnerable": true}, {"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.9:*:*:*:*:*:*:*", "matchCriteriaId": "5CE0A27B-66D7-4D1B-8E6A-F4722C070BD3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:libav:libav:0.5:*:*:*:*:*:*:*", "matchCriteriaId": "F27FF9C0-652E-42E8-90D0-B9B369DD6C8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "15F27211-2DFC-4488-93D2-9A3664E593AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "E6418D3A-9972-4819-B2E6-2510438698A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "DF17452C-ED28-4558-9C90-102DF5485103", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "CECEC54E-7014-447C-9174-8C2B026FF0B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "31BE32E4-9577-4BA7-A275-67A86DB7BCE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "16A3CC3F-C294-4DB3-97AE-1CFBED14A8AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "8E252038-F5E0-427F-8E59-FFD633497D09", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.6:*:*:*:*:*:*:*", "matchCriteriaId": "ABD1BB7A-D6FF-4B80-9DA6-36D081FB41CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "530C27CC-3250-4C94-8D88-F423FFD0BD4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "936C1855-67FB-49C3-A20A-3FE331403366", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "92EB185C-1909-4359-B0C1-681E4ABEEECF", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "136C7881-DB5A-4018-B01F-D2F9069F53D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "090BF77B-A099-4ECD-A9BC-AAD4B499F4C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.7:*:*:*:*:*:*:*", "matchCriteriaId": "18053821-801F-4652-AA73-9FDC5F562BA8", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "D5322AE7-8CAD-45EF-9955-37D16EBBDD40", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "EFCDCA15-DF61-4150-96D7-10D68D07DAD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "C2D50C72-65B2-4490-9259-2A436207A72D", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "B3BCDD63-DECF-4494-BCA7-30BFEE7055D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.7.5:*:*:*:*:*:*:*", "matchCriteriaId": "F3260A66-B1C9-42F0-841E-63FAB009F020", "vulnerable": false}, {"criteria": "cpe:2.3:a:libav:libav:0.8:*:*:*:*:*:*:*", "matchCriteriaId": "4953EC2E-BCD6-41B5-AEB3-0D82C15363A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:libav:libav:0.8:beta2:*:*:*:*:*:*", "matchCriteriaId": "3CEBE4E3-50F3-43CB-911F-E1B52C2B8B3A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file."}, {"lang": "es", "value": "La funci\u00f3n dpcm_decode_frame en dpcm.c en libavcodec de FFmpeg antes de v0.10 y en Libav v0.5.x antes de v0.5.9, v0.6.x antes de v0.6.6, v0.7.x antes de v0.7.6 y v0.8.x antes de v0.8.1 permite provocar una denegaci\u00f3n de servicio (por ca\u00edda de la aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n a atacantes remotos a trav\u00e9s de una se\u00f1al est\u00e9reo dise\u00f1ada para tal fin en un archivo multimedia.\r\n"}], "id": "CVE-2011-3951", "lastModified": "2024-11-21T01:31:35.147", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}]}, "published": "2012-08-20T18:55:02.263", "references": [{"source": "[email protected]", "url": "http://ffmpeg.org/"}, {"source": "[email protected]", "url": "http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=ce7aee9b733134649a6ce2fa743e51733f33e67e"}, {"source": "[email protected]", "url": "http://libav.org/"}, {"source": "[email protected]", "url": "http://www.debian.org/security/2012/dsa-2494"}, {"source": "[email protected]", "url": "http://www.ubuntu.com/usn/USN-1479-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://ffmpeg.org/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=ce7aee9b733134649a6ce2fa743e51733f33e67e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://libav.org/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2012/dsa-2494"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/USN-1479-1"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "[email protected]", "type": "Primary"}]}

{}