Search for vulnerabilities
| Vulnerability ID | VCID-31mb-8y9p-aaae |
| Aliases |
CVE-2011-2161
|
| Summary | The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service (application crash) via an APE (aka Monkey's Audio) file that contains a header but no frames. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 3.9 |
| Risk | 1.9 |
| Affected and Fixed Packages | Package Details |
| CWE-399 | Resource Management Errors |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.64211 |
| EPSS Score | 0.00252 |
| Published At | Dec. 17, 2024, midnight |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| There are no relevant records. | ||||