Search for vulnerabilities
Vulnerability details: VCID-p8g6-wdcb-aaas
Vulnerability ID VCID-p8g6-wdcb-aaas
Aliases CVE-2011-3974
Summary Integer signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, a different vulnerability than CVE-2011-3362.
Status Published
Exploitability 0.5
Weighted Severity 4.5
Risk 2.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-189 Numeric Errors
System Score Found at
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01053 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01347 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
epss 0.01382 https://api.first.org/data/v1/epss?cve=CVE-2011-3974
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2011-3974
Reference id Reference type URL
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bd968d260aef322fb32e254a3de0d2036c57bd56
http://git.videolan.org/?p=ffmpeg.git;a=commit;h=bd968d260aef322fb32e254a3de0d2036c57bd56
https://api.first.org/data/v1/epss?cve=CVE-2011-3974
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3974
http://www.ffmpeg.org/releases/ffmpeg-0.7.5.changelog
http://www.ffmpeg.org/releases/ffmpeg-0.8.4.changelog
http://www.mandriva.com/security/advisories?name=MDVSA-2012:074
http://www.mandriva.com/security/advisories?name=MDVSA-2012:075
http://www.mandriva.com/security/advisories?name=MDVSA-2012:076
641478 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641478
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.2:*:*:*:*:*:*:*
CVE-2011-3974 https://nvd.nist.gov/vuln/detail/CVE-2011-3974
GLSA-201310-12 https://security.gentoo.org/glsa/201310-12
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2011-3974
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.84479
EPSS Score 0.01053
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.