NetSight
IP …
medium6.8

CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.…

Impact

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams."

Affected products

VendorProductAffected versions
FfmpegFfmpeg
Versions 0.7.1, 0.7.2, 0.7.6, 0.7.7, 0.7.8, 0.7.9
LibavLibav
Versions 0.5, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5

Weakness classification

CWE-119

References