CVE-2011-0722

Published: May 20, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file.

Affected (19)

Products: Ffmpeg: Ffmpeg · Mplayerhq: Mplayer

1 product

1 product

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Ffmpeg Ffmpeg	Up to 0.5.3
Ffmpeg Ffmpeg	Version 0.3.1
Ffmpeg Ffmpeg	Version 0.3.2
Ffmpeg Ffmpeg	Version 0.3.3
Ffmpeg Ffmpeg	Version 0.3.4
Ffmpeg Ffmpeg	Version 0.3
Ffmpeg Ffmpeg	Version 0.4.0
Ffmpeg Ffmpeg	Version 0.4.2
Ffmpeg Ffmpeg	Version 0.4.3
Ffmpeg Ffmpeg	Version 0.4.4
Ffmpeg Ffmpeg	Version 0.4.5
Ffmpeg Ffmpeg	Version 0.4.6
Ffmpeg Ffmpeg	Version 0.4.7
Ffmpeg Ffmpeg	Version 0.4.8
Ffmpeg Ffmpeg	Version 0.4.9 pre1
Ffmpeg Ffmpeg	Version 0.5.1
Ffmpeg Ffmpeg	Version 0.5.2
Ffmpeg Ffmpeg	Version 0.5
Mplayerhq Mplayer	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (18)

http://ffmpeg.mplayerhq.hu/

Source: security@ubuntu.com

http://www.debian.org/security/2011/dsa-2306

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:061

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:062

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:089

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:114

Source: security@ubuntu.com

http://www.securityfocus.com/bid/47149

Source: security@ubuntu.com

http://www.ubuntu.com/usn/usn-1104-1/

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2011/1241

Source: security@ubuntu.com

Vendor Advisory

http://ffmpeg.mplayerhq.hu/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2306

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:061

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:062

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:089

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:114

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47149

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-1104-1/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/1241

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.