CVE-2011-2160: Input Validation
The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2160?
CVE-2011-2160 has undetermined severity but pertains to improper handling of VC-1 decoding in FFmpeg, posing potential risks for exploitation.
How do I fix CVE-2011-2160?
To fix CVE-2011-2160, upgrade to FFmpeg version 0.5.4 or later to mitigate the vulnerability.
What software is affected by CVE-2011-2160?
CVE-2011-2160 affects various versions of FFmpeg prior to 0.5.4 and also impacts MPlayer utilizing these vulnerable FFmpeg versions.
What type of attacks are possible with CVE-2011-2160?
CVE-2011-2160 allows remote attackers to exploit crafted VC-1 files, which can lead to unspecified impacts such as denial of service.
Is CVE-2011-2160 related to other vulnerabilities?
Yes, CVE-2011-2160 is related to CVE-2011-0723, which also concerns vulnerabilities in VC-1 decoding.