CVE-2011-3504
CVE-2011-3504
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file.
EPSS 5.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:076
- http://ubuntu.com/usn/usn-1320-1
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:074
- http://secunia.com/advisories/45532
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:075
- http://www.ffmpeg.org/releases/ffmpeg-0.8.4.changelog
- http://ubuntu.com/usn/usn-1333-1
- http://www.osvdb.org/75621
- http://www.ffmpeg.org/releases/ffmpeg-0.7.5.changelog
- http://technet.microsoft.com/en-us/security/msvr/msvr11-011
- https://nvd.nist.gov/vuln/detail/CVE-2011-3504