SB2013120906 - Buffer overflow in ffmpeg.sourceforge.net FFmpeg



SB2013120906 - Buffer overflow in ffmpeg.sourceforge.net FFmpeg

Published: December 9, 2013 Updated: August 10, 2020

Security Bulletin ID SB2013120906
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Buffer overflow (CVE-ID: CVE-2011-4351)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors.


Remediation

Install update from vendor's website.