FFmpeg VC1 Decoding CVE-2011-2160 Memory Corruption Remote Code Execution Vulnerability
BID:47956
Info
FFmpeg VC1 Decoding CVE-2011-2160 Memory Corruption Remote Code Execution Vulnerability
| Bugtraq ID: | 47956 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2011-2160 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2011 12:00AM |
| Updated: | May 23 2011 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
MPlayer MPlayer 0 FFmpeg FFmpeg 0.4.9 FFmpeg FFmpeg 0.4.8 FFmpeg FFmpeg 0.4.7 FFmpeg FFmpeg 0.4.6 FFmpeg FFmpeg 0.5.3 FFmpeg FFmpeg 0.5.2 FFmpeg FFmpeg 0 |
| Not Vulnerable: |
FFmpeg FFmpeg 0.5.4 |
Discussion
FFmpeg VC1 Decoding CVE-2011-2160 Memory Corruption Remote Code Execution Vulnerability
FFmpeg is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to FFmpeg 0.5.4 are vulnerable.
FFmpeg is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Versions prior to FFmpeg 0.5.4 are vulnerable.
Exploit / POC
FFmpeg VC1 Decoding CVE-2011-2160 Memory Corruption Remote Code Execution Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
FFmpeg VC1 Decoding CVE-2011-2160 Memory Corruption Remote Code Execution Vulnerability
References:
References:
- FFmpeg Homepage (FFmpeg )