CVE-2011-0722
Estado: ModificadaMedia (6.8)—
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.23%
- Percentil entre todas las CVEs puntuadas: 91
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-119
Referencias
- http://ffmpeg.mplayerhq.hu/
- http://www.debian.org/security/2011/dsa-2306
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
- http://www.securityfocus.com/bid/47149
- http://www.ubuntu.com/usn/usn-1104-1/
- http://www.vupen.com/english/advisories/2011/1241
- http://ffmpeg.mplayerhq.hu/
- http://www.debian.org/security/2011/dsa-2306
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
- http://www.securityfocus.com/bid/47149
- http://www.ubuntu.com/usn/usn-1104-1/
- http://www.vupen.com/english/advisories/2011/1241
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-0722",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "security@ubuntu.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-05-20T22:55:02.313",
"references": [
{
"url": "http://ffmpeg.mplayerhq.hu/",
"source": "security@ubuntu.com"
},
{
"url": "http://www.debian.org/security/2011/dsa-2306",
"source": "security@ubuntu.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:061",
"source": "security@ubuntu.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:062",
"source": "security@ubuntu.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:089",
"source": "security@ubuntu.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:114",
"source": "security@ubuntu.com"
},
{
"url": "http://www.securityfocus.com/bid/47149",
"source": "security@ubuntu.com"
},
{
"url": "http://www.ubuntu.com/usn/usn-1104-1/",
"source": "security@ubuntu.com"
},
{
"url": "http://www.vupen.com/english/advisories/2011/1241",
"tags": [
"Vendor Advisory"
],
"source": "security@ubuntu.com"
},
{
"url": "http://ffmpeg.mplayerhq.hu/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2011/dsa-2306",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:061",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:062",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:089",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:114",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/47149",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/usn-1104-1/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2011/1241",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file."
},
{
"lang": "es",
"value": "FFmpeg antes de v0.5.4, tal como se utiliza en MPlayer y otros productos, permite a atacantes remotos provocar una denegación de servicio (daños en la memoria dinámica y bloqueo de la aplicación) o posiblemente ejecutar código de su elección a través de un formato incorrecto de archivo de RealMedia."
}
],
"lastModified": "2026-06-16T23:27:57.047",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4DC8258-EB4F-4D4D-B4D7-2066FB9D1C59",
"versionEndIncluding": "0.5.3"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2649A80-4739-4BBB-AB0B-99AD435BE7CF"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4A2E77D-B826-4B49-ADC8-7F704E149A5A"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18157837-4550-45E3-A12E-AE06E047E253"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9F42611-C3E2-416B-9AE7-A5AE83E4DEF7"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A20789F-26E3-4871-B24E-25E922BADDF0"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67C6C243-3ACC-49C3-80CA-D7CA8FEFF0D8"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AE6D368-0BA6-4499-B7E1-EE16C03012E9"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26C0F6EF-0452-4AFE-AF3E-B88F963A0938"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B4DD372-4D3B-445C-8C38-E083A3C0D4A7"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "733C03D7-2780-4D69-A98D-BCFB91D1119A"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AEE1977-E9E0-4BFF-B33B-B083E49E51F1"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6979C17-0BC6-47D1-9B73-254D84306A96"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "204C7C05-3441-4DB0-8702-D99C8FCB381E"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E1A7011-B992-4E35-B306-45772DACB23C"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D486C17-FC4A-4AEE-A430-1B1FBCC2C27C"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "632BC7C2-FE59-47B0-885C-0EB8C74DF041"
},
{
"criteria": "cpe:2.3:a:ffmpeg:ffmpeg:0.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D1AE0BF-A6FD-4EBA-BF61-07AC81EA560D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mplayerhq:mplayer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD0AD240-4093-4D11-AE22-F46A08C163D6"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security@ubuntu.com"
}