CVE-2011-0723
Fixed in a distro release EPSS 4%
FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ffmpeg | 7:2.4.1-1 |
| Debian 13 | ffmpeg | 7:2.4.1-1 |
| Debian 14 | ffmpeg | 7:2.4.1-1 |
| Debian 6.0 | ffmpeg | 4:0.5.4-1 |