Every CVE Search/ Get API key

CVE-2008-3230

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application...

1.9 LowFix available

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Exploit likelihood

0.41%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 1.9

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Record
CVE-2008-3230
CVSS 2.0
1.9 LowAV:L/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Record
CVE-2008-3230
Updated
2026-11-02
EUVDEUVD-2008-3218 No score

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Record
EUVD-2008-3218
Updated
2026-11-03
GitHub AdvisoriesGHSA-2h3w-9mqf-3gfh No score

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application...

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Record
GHSA-2h3w-9mqf-3gfh
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Record
CVE-2008-3230
Updated
2026-11-02
OSVDEBIAN-CVE-2008-3230 No score

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Record
DEBIAN-CVE-2008-3230
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ffmpeg
Debian:12
before 0.svn20080206-16
0.svn20080206-16
ffmpeg
Debian:13
before 0.svn20080206-16
0.svn20080206-16
ffmpeg
Debian:14
before 0.svn20080206-16
0.svn20080206-16

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3230 is a low vulnerability (CVSS 1.9) in Ffmpeg Lavf Demuxer, published July 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in ffmpeg 0.svn20080206-16.

References

Show 4 moreShow less
MoveEnter Open