CVE-2011-4579: Buffer Overflow

Published Aug 20, 2012

Updated

The svq1decodeframe function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream, related to "dimensions changed."

Affected Software

37 affected components

FFmpeg FFmpeg=0.5

FFmpeg FFmpeg=0.5.1

FFmpeg FFmpeg=0.5.2

FFmpeg FFmpeg=0.5.3

FFmpeg FFmpeg=0.5.4

FFmpeg FFmpeg=0.5.5

FFmpeg FFmpeg=0.6

FFmpeg FFmpeg=0.6.1

FFmpeg FFmpeg=0.6.2

FFmpeg FFmpeg=0.7

FFmpeg FFmpeg=0.7.1

FFmpeg FFmpeg=0.7.2

FFmpeg FFmpeg=0.7.3

FFmpeg FFmpeg=0.7.6

FFmpeg FFmpeg=0.7.7

FFmpeg FFmpeg=0.7.8

FFmpeg FFmpeg=0.8.0

FFmpeg FFmpeg=0.8.1

FFmpeg FFmpeg=0.8.2

FFmpeg FFmpeg=0.8.5

FFmpeg FFmpeg=0.8.6

FFmpeg FFmpeg=0.8.7

Libav Libav=0.5

Libav Libav=0.5.1

Libav Libav=0.5.2

Libav Libav=0.5.3

Libav Libav=0.5.4

Libav Libav=0.5.5

Libav Libav=0.6

Libav Libav=0.6.1

Libav Libav=0.6.2

Libav Libav=0.6.3

Libav Libav=0.6.4

Libav Libav=0.6.5

Libav Libav=0.7

Libav Libav=0.7.1

Libav Libav=0.7.2

Event History

Aug 20, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-4579?

CVE-2011-4579 is classified as a denial of service vulnerability that can affect certain versions of FFmpeg and Libav.

How do I fix CVE-2011-4579?

To fix CVE-2011-4579, you should upgrade to the latest versions of FFmpeg or Libav that have patched this vulnerability.

Which software versions are affected by CVE-2011-4579?

CVE-2011-4579 affects FFmpeg versions 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8, as well as certain versions of Libav.

Can CVE-2011-4579 be exploited remotely?

Yes, CVE-2011-4579 allows remote attackers to exploit the vulnerability and cause a denial of service.

What specific function in FFmpeg is vulnerable in CVE-2011-4579?

The vulnerability in CVE-2011-4579 is found in the svq1_decode_frame function within the SVQ1 decoder in FFmpeg.