vulnerability CVE-2011-3929 CVE-2011-3934 CVE-2011-3935

FFmpeg: several vulnerabilities

Synthesis of the vulnerability

An attacker can create a malicious video, and invite the victim to display it with an application linked to FFmpeg, in order to stop it or to execute code on his computer.

Severity: 2/4. Creation date: 31/01/2012.

Impacted products

• Debian Linux
• Unix - plateform

Description of the vulnerability

The FFmpeg suite contains several libraries to process multimedia data. It is impacted by several vulnerabilities. An attacker can therefore create a malicious video, and invite the victim to display it with an application linked to FFmpeg, in order to stop it or to execute code on his computer.

Share this bulletin

Complete Vigil@nce bulletin

FFmpeg: several vulnerabilities

Characteristics

Title: FFmpeg: several vulnerabilities. Keywords: FFmpeg several vulnerabilities. Identifiers: BID-51720, CERTA-2012-AVI-039, CERTA-2012-AVI-253, CVE-2011-3929, CVE-2011-3934, CVE-2011-3935, CVE-2011-3936, CVE-2011-3937, CVE-2011-3940, CVE-2011-3941, CVE-2011-3944, CVE-2011-3945, CVE-2011-3946, CVE-2011-3947, CVE-2011-3949, CVE-2011-3950, CVE-2011-3951, CVE-2011-3952, DSA-2471-1, VIGILANCE-VUL-11330.

Information sources

Publications and announces Source example: January, 27, 2012, FFmpeg 0.10

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

Vigil@nce provides network vulnerability bulletins. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. Each administrator can customize the list of products for which he wants to receive vulnerability alerts.