CVE-2011-3937 The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5...
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to "width/height changing with frame threads."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ffmpeg/ffmpeg | <= 0.9.1 | No fix listed |
| ffmpeg/ffmpeg | = 0.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.1 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.4 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.0 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.4 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.5 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.6 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.7 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.8 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.9 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.9-pre1 | No fix listed |
| ffmpeg/ffmpeg | = 0.5 | No fix listed |
| ffmpeg/ffmpeg | = 0.5.1 | No fix listed |
| ffmpeg/ffmpeg | = 0.5.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.5.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.5.4 | No fix listed |
| ffmpeg/ffmpeg | = 0.5.4.5 | No fix listed |
| ffmpeg/ffmpeg | = 0.5.4.6 | No fix listed |
| ffmpeg/ffmpeg | = 0.6 | No fix listed |
| ffmpeg/ffmpeg | = 0.6.1 | No fix listed |
Show 50 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ffmpeg/ffmpeg | = 0.6.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.6.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.7 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.1 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.4 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.5 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.6 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.7 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.8 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.9 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.11 | No fix listed |
| ffmpeg/ffmpeg | = 0.7.12 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.0 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.1 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.5 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.5.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.5.4 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.6 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.7 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.8 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.10 | No fix listed |
| ffmpeg/ffmpeg | = 0.8.11 | No fix listed |
| ffmpeg/ffmpeg | = 0.9 | No fix listed |
| libav | = 0.5 | No fix listed |
| libav | = 0.5.1 | No fix listed |
| libav | = 0.5.2 | No fix listed |
| libav | = 0.5.3 | No fix listed |
| libav | = 0.5.4 | No fix listed |
| libav | = 0.5.5 | No fix listed |
| libav | = 0.5.6 | No fix listed |
| libav | = 0.5.7 | No fix listed |
| libav | = 0.5.8 | No fix listed |
| libav | = 0.6 | No fix listed |
| libav | = 0.6.1 | No fix listed |
| libav | = 0.6.2 | No fix listed |
| libav | = 0.6.3 | No fix listed |
| libav | = 0.6.4 | No fix listed |
| libav | = 0.6.5 | No fix listed |
| libav | = 0.7 | No fix listed |
| libav | = 0.7-beta1 | No fix listed |
| libav | = 0.7-beta2 | No fix listed |
| libav | = 0.7.1 | No fix listed |
| libav | = 0.7.2 | No fix listed |
| libav | = 0.7.3 | No fix listed |
| libav | = 0.7.4 | No fix listed |
| libav | = 0.8 | No fix listed |
| libav | = 0.8-beta2 | No fix listed |
References
- ffmpeg.org
- git.libav.org
- git.videolan.org
- libav.org
- MDVSA-2013:079 vendor-advisory
- Debian Security Tracker CVE-2011-3937 vendor-advisory