The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size.

The remote host is affected by the vulnerability described in GLSA-201502-08 (Libav: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Libav. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file in an application linked against Libav, possibly resulting in       execution of arbitrary code with the privileges of the application or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8 .15

The remote host is affected by the vulnerability described in GLSA-201310-12 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg. Please review       the CVE identifiers and FFmpeg changelogs referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file, possibly leading to the execution of arbitrary code with the       privileges of the user running the application or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
81231	GLSA-201502-08 : Libav: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
77122	Debian DSA-3003-1 : libav - security update	Nessus	Debian Local Security Checks	high
70647	GLSA-201310-12 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2011-3935

high

Tenable Plugins

high

high

critical