CVE-2011-3974

State: Published
Severity: Not scored
Published: Oct 2, 2011
Updated: Aug 6, 2024
Reserved: Oct 2, 2011

Description

Integer signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file, a different vulnerability than CVE-2011-3362.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

MDVSA-2012:076vendor-advisory
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bd968d260aef322fb32e254a3de0d2036c57bd56
MDVSA-2012:074vendor-advisory
MDVSA-2012:075vendor-advisory
http://www.ffmpeg.org/releases/ffmpeg-0.8.4.changelog
http://www.ffmpeg.org/releases/ffmpeg-0.7.5.changelog

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.