CVE-2011-4031

Published: May 9, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer underflow in the asfrtp_parse_packet function in libavformat/rtpdec_asf.c in FFmpeg before 0.8.3 allows remote attackers to execute arbitrary code via a crafted ASF packet.

Affected (1)

Products: Ffmpeg: Ffmpeg

Ffmpeg

1 product

Ffmpeg

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ffmpeg Ffmpeg	Before 0.8.3

Related CWEs

CWE-191

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (6)

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c2a2ad133eb9d42361804a568dee336992349a5e

Source: cve@mitre.org

http://git.videolan.org/?p=ffmpeg.git%3Ba=shortlog%3Bh=n0.8.3

Source: cve@mitre.org

http://technet.microsoft.com/en-us/security/msvr/msvr11-012

Source: cve@mitre.org

PatchThird Party Advisory

http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c2a2ad133eb9d42361804a568dee336992349a5e

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.videolan.org/?p=ffmpeg.git%3Ba=shortlog%3Bh=n0.8.3

Source: af854a3a-2127-422b-91ae-364da2661108

http://technet.microsoft.com/en-us/security/msvr/msvr11-012

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.