CVE-2011-0722: Buffer Overflow
Published May 20, 2011
·Updated
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file.
Affected Software
19 affected components
FFmpeg FFmpeg<=0.5.3
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.5.2
Mplayerhq Mplayer
Event History
May 20, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
10:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-0722?
CVE-2011-0722 has a high severity rating due to its potential to cause denial of service or arbitrary code execution.
2
How do I fix CVE-2011-0722?
To fix CVE-2011-0722, update FFmpeg to version 0.5.4 or later.
3
What attack vector is associated with CVE-2011-0722?
CVE-2011-0722 can be exploited by remote attackers through malformed RealMedia files.
4
Which software versions are affected by CVE-2011-0722?
CVE-2011-0722 affects FFmpeg versions prior to 0.5.4 and includes several older versions.
5
What are the potential consequences of exploiting CVE-2011-0722?
Exploiting CVE-2011-0722 may result in heap memory corruption, application crashes, or execution of arbitrary code.