Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2011-2160

Опубликовано: 20 мая 2011
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 9.3

Описание

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723.

РелизСтатусПримечание
dapper

ignored

end of life
devel

DNE

hardy

ignored

end of life
lucid

released

4:0.5.1-1ubuntu1.1
maverick

not-affected

0.6-2ubuntu6
natty

DNE

upstream

released

0.5.4

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

DNE

lucid

released

4:0.5.1-1ubuntu1.1
maverick

not-affected

0.6-2ubuntu6
natty

DNE

upstream

released

0.5.4

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

not-affected

hardy

DNE

lucid

DNE

maverick

DNE

natty

not-affected

upstream

not-affected

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

not-affected

hardy

DNE

lucid

DNE

maverick

DNE

natty

not-affected

upstream

not-affected

Показывать по

Ссылки на источники

EPSS

Процентиль: 73%
0.00753
Низкий

9.3 Critical

CVSS2

Связанные уязвимости

nvd
больше 14 лет назад

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723.

debian
больше 14 лет назад

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPl ...

github
больше 3 лет назад

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723.

EPSS

Процентиль: 73%
0.00753
Низкий

9.3 Critical

CVSS2