CVE-2011-3929: Buffer Overflow

Published Aug 20, 2012

Updated

The avprivdvproducepacket function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly execute arbitrary code via a crafted DV file.

Affected Software

33 affected components

FFmpeg FFmpeg=0.7.7

FFmpeg FFmpeg=0.7.1

FFmpeg FFmpeg=0.7.6

FFmpeg FFmpeg=0.7.8

FFmpeg FFmpeg=0.7.9

FFmpeg FFmpeg=0.7.11

FFmpeg FFmpeg=0.7.2

FFmpeg FFmpeg=0.8.6

FFmpeg FFmpeg=0.8.5

FFmpeg FFmpeg=0.8.10

FFmpeg FFmpeg=0.8.7

FFmpeg FFmpeg=0.8.8

Libav Libav=0.5.6

Libav Libav=0.5.7

Libav Libav=0.5.3

Libav Libav=0.5

Libav Libav=0.5.2

Libav Libav=0.5.5

Libav Libav=0.5.4

Libav Libav=0.5.1

Libav Libav=0.6.5

Libav Libav=0.6.2

Libav Libav=0.6.4

Libav Libav=0.6.3

Libav Libav=0.6.1

Libav Libav=0.6

Libav Libav=0.7

Libav Libav=0.7.4

Libav Libav=0.7.1

Libav Libav=0.7.2

Libav Libav=0.7.3

Libav Libav=0.8

Libav Libav=0.8-beta2

Remediation

Patch Available

http://git.libav.org/?p=libav.git;a=commitdiff;h=5a396bb3a66a61a68b80f2369d0249729bf85e04

Event History

Aug 20, 2012

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3929?

CVE-2011-3929 has a medium severity level as it can lead to denial of service through a NULL pointer dereference.

How do I fix CVE-2011-3929?

To fix CVE-2011-3929, you should update FFmpeg to version 0.7.12 or later and Libav to version 0.5.9 or later.

Which versions of FFmpeg are affected by CVE-2011-3929?

FFmpeg versions 0.7.x before 0.7.12 and 0.8.x before 0.8.11 are affected by CVE-2011-3929.

Which versions of Libav are affected by CVE-2011-3929?

Libav versions 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 are affected by CVE-2011-3929.

What type of vulnerability is CVE-2011-3929?

CVE-2011-3929 is a denial of service vulnerability caused by improper handling of data in the avpriv_dv_produce_packet function.