CVE-2012-2779

Severity

99%

Complexity

99%

Confidentiality

165%

Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."

Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 12 years ago

2012-09-10 22:55:00

Last updated 6 years ago

2018-10-30 16:25:00

Affected Software

libav 0.7

0.7

libav 0.7 beta 1

0.7

libav 0.7 beta

0.7

libav 0.7.1

0.7.1

libav 0.7.2

0.7.2

libav 0.7.3

0.7.3

libav 0.7.4

0.7.4

libav 0.7.5

0.7.5

libav 0.7.6

0.7.6

FFmpeg 0.3

0.3

FFmpeg 0.3.1

0.3.1

FFmpeg 0.3.2

0.3.2

FFmpeg 0.3.3

0.3.3

FFmpeg 0.3.4

0.3.4

FFmpeg 0.4.0

0.4.0

FFmpeg 0.4.2

0.4.2

FFmpeg 0.4.3

0.4.3

FFmpeg 0.4.4

0.4.4

FFmpeg 0.4.5

0.4.5

FFmpeg 0.4.6

0.4.6

FFmpeg 0.4.7

0.4.7

FFmpeg 0.4.8

0.4.8

FFmpeg 0.4.9 pre1

0.4.9

FFmpeg 0.5

0.5

FFmpeg 0.5.1

0.5.1

FFmpeg 0.5.2

0.5.2

FFmpeg 0.5.3

0.5.3

FFmpeg 0.5.4

0.5.4

FFmpeg 0.5.4.5

0.5.4.5

FFmpeg 0.5.4.6

0.5.4.6

FFmpeg 0.6

0.6

FFmpeg 0.6.1

0.6.1

FFmpeg 0.6.2

0.6.2

FFmpeg 0.6.3

0.6.3

FFmpeg 0.7

0.7

FFmpeg 0.7.1

0.7.1

FFmpeg 0.7.2

0.7.2

FFmpeg 0.7.3

0.7.3

FFmpeg 0.7.4

0.7.4

FFmpeg 0.7.5

0.7.5

FFmpeg 0.7.6

0.7.6

FFmpeg 0.7.7

0.7.7

FFmpeg 0.7.8

0.7.8

FFmpeg 0.7.9

0.7.9

FFmpeg 0.7.11

0.7.11

FFmpeg 0.7.12

0.7.12

FFmpeg 0.8.0

0.8.0

FFmpeg 0.8.1

0.8.1

FFmpeg 0.8.2

0.8.2

FFmpeg 0.8.5

0.8.5

FFmpeg 0.8.5.3

0.8.5.3

FFmpeg 0.8.5.4

0.8.5.4

FFmpeg 0.8.6

0.8.6

FFmpeg 0.8.7

0.8.7

FFmpeg 0.8.8

0.8.8

FFmpeg 0.8.10

0.8.10

FFmpeg 0.8.11

0.8.11

FFmpeg FFmpeg 0.9

0.9

FFmpeg FFmpeg 0.9.1

0.9.1

FFmpeg 0.10

0.10

FFmpeg 0.10.3

0.10.3

libav 0.8

0.8

libav 0.8 beta2

0.8

libav 0.8.1

0.8.1

libav 0.8.2

0.8.2

libav 0.8.3

0.8.3

References

http://ffmpeg.org/security.html

http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=229e4c133287955d5f3f837520a3602709b21950

http://libav.org/releases/libav-0.7.7.changelog

http://libav.org/releases/libav-0.8.4.changelog

50468

Vendor Advisory

51257

Vendor Advisory

MDVSA-2013:079

[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?

[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?

55355

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.