CVE-2008-3230

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-07-18 · updated 2026-06-16
Weakness: CWE-20

Description

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Affected products

FFmpeg Lavf Demuxer: all versions

References

http://bugzilla.gnome.org/show_bug.cgi?id=542643
http://secunia.com/advisories/31899
http://www.mandriva.com/security/advisories?name=MDVSA-2009:297
http://www.openwall.com/lists/oss-security/2008/07/13/3
http://www.securityfocus.com/bid/31234
https://exchange.xforce.ibmcloud.com/vulnerabilities/44210
https://roundup.mplayerhq.hu/roundup/ffmpeg/issue530
http://bugzilla.gnome.org/show_bug.cgi?id=542643
http://secunia.com/advisories/31899
http://www.mandriva.com/security/advisories?name=MDVSA-2009:297
http://www.openwall.com/lists/oss-security/2008/07/13/3
http://www.securityfocus.com/bid/31234

Get alerted when CVE-2008-3230 or the next vulnerability affects your stack