CVE-2011-3936

Description

The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DV file.

References

http://www.ubuntu.com/usn/USN-1479-1

http://www.debian.org/security/2012/dsa-2471

http://secunia.com/advisories/49089

http://libav.org/

http://git.libav.org/?p=libav.git%3Ba=commitdiff%3Bh=2d1c0dea5f6b91bec7f5fa53ec050913d851e366

http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=635bcfccd439480003b74a665b5aa7c872c1ad6b

http://ffmpeg.org/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3