CVE-2011-3504: Code Injection
Published Sep 29, 2011
·Updated
The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file.
Affected Software
24 affected components
FFmpeg FFmpeg<=0.8.0
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.9
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.5.2
FFmpeg FFmpeg=0.5.3
FFmpeg FFmpeg=0.5.4
FFmpeg FFmpeg=0.6
FFmpeg FFmpeg=0.6.1
FFmpeg FFmpeg=0.6.2
Event History
Sep 29, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3504?
The severity of CVE-2011-3504 is classified as high due to its potential for remote code execution.
2
How do I fix CVE-2011-3504?
To fix CVE-2011-3504, upgrade FFmpeg to version 0.8.4 or later.
3
What versions of FFmpeg are affected by CVE-2011-3504?
CVE-2011-3504 affects all versions of FFmpeg prior to 0.8.4.
4
Can CVE-2011-3504 be exploited remotely?
Yes, CVE-2011-3504 can be exploited remotely through crafted Matroska files.
5
What impact does CVE-2011-3504 have on my system?
CVE-2011-3504 allows remote attackers to execute arbitrary code, posing a significant security risk.