← Back

CVE-2011-2160

nvd nist
Published: May 20, 2011Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723.

Affected (19)

Ffmpeg
1 product
Ffmpeg
Mplayerhq
1 product
Mplayer
Configuration A
19 vulnerable
Vulnerable SoftwareAffected Versions
Ffmpeg
Ffmpeg
Up to 0.5.3
Ffmpeg
Version 0.3.1
Ffmpeg
Version 0.3.2
Ffmpeg
Version 0.3.3
Ffmpeg
Version 0.3.4
Ffmpeg
Version 0.3
Ffmpeg
Version 0.4.0
Ffmpeg
Version 0.4.2
Ffmpeg
Version 0.4.3
Ffmpeg
Version 0.4.4
Ffmpeg
Version 0.4.5
Ffmpeg
Version 0.4.6
Ffmpeg
Version 0.4.7
Ffmpeg
Version 0.4.8
Ffmpeg
Version 0.4.9 pre1
Ffmpeg
Version 0.5.1
Ffmpeg
Version 0.5.2
Ffmpeg
Version 0.5
Mplayer
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.