CVE-2011-3946: Medium severity ffmpeg vulnerability
Published Dec 9, 2013
·Updated
The ffh264decodesei function in libavcodec/h264sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop.
Affected Software
51 affected components
FFmpeg FFmpeg=0.7.7
FFmpeg FFmpeg=0.7.1
FFmpeg FFmpeg=0.7.6
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.8.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.6.1
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.7.5
FFmpeg FFmpeg=0.5.4.6
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.4
FFmpeg FFmpeg=0.8.5.4
FFmpeg FFmpeg=0.8.5.3
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.8.5
FFmpeg FFmpeg=0.9
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.7.3
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.7.4
FFmpeg FFmpeg=0.8.0
FFmpeg FFmpeg=0.5.5
FFmpeg FFmpeg=0.6
FFmpeg FFmpeg=0.5.3
FFmpeg FFmpeg=0.8.10
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.5.2
FFmpeg FFmpeg<=0.9.1
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.7.8
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.6.2
FFmpeg FFmpeg=0.8.7
FFmpeg FFmpeg=0.7.9
FFmpeg FFmpeg=0.5.4.5
FFmpeg FFmpeg=0.7
FFmpeg FFmpeg=0.7.12
FFmpeg FFmpeg=0.8.1
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.6.3
FFmpeg FFmpeg=0.8.11
FFmpeg FFmpeg=0.8.8
FFmpeg FFmpeg=0.8.2
FFmpeg FFmpeg=0.7.11
FFmpeg FFmpeg=0.7.2
Remediation
Event History
Dec 9, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3946?
CVE-2011-3946 has a high severity rating due to its ability to cause an infinite loop via crafted SEI data.
2
How do I fix CVE-2011-3946?
To fix CVE-2011-3946, upgrade to a version of FFmpeg that is 0.10 or later.
3
What versions of FFmpeg are affected by CVE-2011-3946?
CVE-2011-3946 affects multiple versions of FFmpeg prior to 0.10, including 0.7.1, 0.7.6, and several others.
4
What type of attack can exploit CVE-2011-3946?
An attacker can exploit CVE-2011-3946 using specially crafted Supplemental Enhancement Information (SEI) data.
5
What are the potential impacts of CVE-2011-3946?
The potential impacts of CVE-2011-3946 include service disruption due to the application entering an infinite loop.