Vulnerability in Ffmpeg

CVE-2011-0723

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.

EPSS: 0.044 (90.4th percentile) — read the EPSS interpretation.

Affected products

Ffmpeg — versions 0.5.1, 0.5.2, 0.5.3
Mplayer
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

security@ubuntu.com (vendor-advisory, x_refsource_DEBIAN)
security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA)
security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA)
security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA)
security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA)
security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)
security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA)
security@ubuntu.com (vdb-entry, x_refsource_BID)
security@ubuntu.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
security@ubuntu.com (x_refsource_MISC)