CVE-2011-3362

Published: Oct 2, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer signedness error in the decode_residual_block function in cavsdec.c in libavcodec in FFmpeg before 0.7.3 and 0.8.x before 0.8.2, and libav through 0.7.1, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Chinese AVS video (aka CAVS) file.

Affected (49)

Products: Ffmpeg: Ffmpeg · Libav: Libav

1 product

1 product

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Ffmpeg Ffmpeg	Up to 0.7.2
Ffmpeg Ffmpeg	Version 0.3.1
Ffmpeg Ffmpeg	Version 0.3.2
Ffmpeg Ffmpeg	Version 0.3.3
Ffmpeg Ffmpeg	Version 0.3.4
Ffmpeg Ffmpeg	Version 0.3
Ffmpeg Ffmpeg	Version 0.4.0
Ffmpeg Ffmpeg	Version 0.4.2
Ffmpeg Ffmpeg	Version 0.4.3
Ffmpeg Ffmpeg	Version 0.4.4
Ffmpeg Ffmpeg	Version 0.4.5
Ffmpeg Ffmpeg	Version 0.4.6
Ffmpeg Ffmpeg	Version 0.4.7
Ffmpeg Ffmpeg	Version 0.4.8
Ffmpeg Ffmpeg	Version 0.4.9 pre1
Ffmpeg Ffmpeg	Version 0.5.1
Ffmpeg Ffmpeg	Version 0.5.2
Ffmpeg Ffmpeg	Version 0.5.3
Ffmpeg Ffmpeg	Version 0.5.4
Ffmpeg Ffmpeg	Version 0.5
Ffmpeg Ffmpeg	Version 0.6.1
Ffmpeg Ffmpeg	Version 0.6.2
Ffmpeg Ffmpeg	Version 0.6
Ffmpeg Ffmpeg	Version 0.7.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Ffmpeg Ffmpeg	Version 0.8.0
Ffmpeg Ffmpeg	Version 0.8.1

Configuration C

23 vulnerable

Vulnerable Software	Affected Versions
Libav Libav	Up to 0.7.1
Libav Libav	Version 0.3.1
Libav Libav	Version 0.3.2
Libav Libav	Version 0.3.3
Libav Libav	Version 0.3.4
Libav Libav	Version 0.3
Libav Libav	Version 0.4.0
Libav Libav	Version 0.4.1
Libav Libav	Version 0.4.2
Libav Libav	Version 0.4.3
Libav Libav	Version 0.4.4
Libav Libav	Version 0.4.5
Libav Libav	Version 0.4.6
Libav Libav	Version 0.4.7
Libav Libav	Version 0.4.8
Libav Libav	Version 0.4.9 pre1
Libav Libav	Version 0.5.4
Libav Libav	Version 0.5
Libav Libav	Version 0.6.1
Libav Libav	Version 0.6.2
Libav Libav	Version 0.6
Libav Libav	Version 0.7 beta1
Libav Libav	Version 0.7 beta2