Search for vulnerabilities
Vulnerability details: VCID-5bkf-mt7t-aaaq
Vulnerability ID VCID-5bkf-mt7t-aaaq
Aliases CVE-2011-3973
Summary cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, related to the decode_residual_block, check_for_slice, and cavs_decode_frame functions, a different vulnerability than CVE-2011-3362.
Status Published
Exploitability 0.5
Weighted Severity 4.5
Risk 2.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-399 Resource Management Errors
System Score Found at
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01347 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3973
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2011-3973
Reference id Reference type URL
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bd968d260aef322fb32e254a3de0d2036c57bd56
http://git.videolan.org/?p=ffmpeg.git;a=commit;h=bd968d260aef322fb32e254a3de0d2036c57bd56
https://api.first.org/data/v1/epss?cve=CVE-2011-3973
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3973
http://www.ffmpeg.org/releases/ffmpeg-0.7.5.changelog
http://www.ffmpeg.org/releases/ffmpeg-0.8.4.changelog
http://www.mandriva.com/security/advisories?name=MDVSA-2012:074
http://www.mandriva.com/security/advisories?name=MDVSA-2012:075
http://www.mandriva.com/security/advisories?name=MDVSA-2012:076
641478 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641478
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.2:*:*:*:*:*:*:*
CVE-2011-3973 https://nvd.nist.gov/vuln/detail/CVE-2011-3973
GLSA-201310-12 https://security.gentoo.org/glsa/201310-12
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2011-3973
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.84479
EPSS Score 0.01053
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.