CVE-2011-0723

NONE EPSS 90.2%
Published May 20, 201115y ago · Modified Jun 16, 20262w ago
Find Similar
Published May 20, 2011 15y ago
Last Modified Jun 16, 2026 2w ago

Description

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.

Threat Intelligence

EPSS Exploit Probability
90.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-399

Affected Products 5

VendorProductVersionRange
ffmpegffmpeg0.5.1any
ffmpegffmpeg0.5.2any
ffmpegffmpeg0.5.3any
ffmpegffmpeg0.5.4any
mplayermplayer*any

References 10

  • ffmpeg.mplayerhq.hu http://ffmpeg.mplayerhq.hu/
  • debian.org http://www.debian.org/security/2011/dsa-2306
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
  • securityfocus.com http://www.securityfocus.com/bid/47151
  • ubuntu.com http://www.ubuntu.com/usn/usn-1104-1/
  • vupen.com http://www.vupen.com/english/advisories/2011/1241
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.