CVE-2012-2797

Severity

99%

Complexity

99%

Confidentiality

165%

Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough."

Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough."

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 12 years ago

2012-09-10 22:55:00

Last updated 6 years ago

2018-10-30 16:25:00

Affected Software

FFmpeg 0.3

0.3

FFmpeg 0.3.1

0.3.1

FFmpeg 0.3.2

0.3.2

FFmpeg 0.3.3

0.3.3

FFmpeg 0.3.4

0.3.4

FFmpeg 0.4.0

0.4.0

FFmpeg 0.4.2

0.4.2

FFmpeg 0.4.3

0.4.3

FFmpeg 0.4.4

0.4.4

FFmpeg 0.4.5

0.4.5

FFmpeg 0.4.6

0.4.6

FFmpeg 0.4.7

0.4.7

FFmpeg 0.4.8

0.4.8

FFmpeg 0.4.9 pre1

0.4.9

FFmpeg 0.5

0.5

FFmpeg 0.5.1

0.5.1

FFmpeg 0.5.2

0.5.2

FFmpeg 0.5.3

0.5.3

FFmpeg 0.5.4

0.5.4

FFmpeg 0.5.4.5

0.5.4.5

FFmpeg 0.5.4.6

0.5.4.6

FFmpeg 0.6

0.6

FFmpeg 0.6.1

0.6.1

FFmpeg 0.6.2

0.6.2

FFmpeg 0.6.3

0.6.3

FFmpeg 0.7

0.7

FFmpeg 0.7.1

0.7.1

FFmpeg 0.7.2

0.7.2

FFmpeg 0.7.3

0.7.3

FFmpeg 0.7.4

0.7.4

FFmpeg 0.7.5

0.7.5

FFmpeg 0.7.6

0.7.6

FFmpeg 0.7.7

0.7.7

FFmpeg 0.7.8

0.7.8

FFmpeg 0.7.9

0.7.9

FFmpeg 0.7.11

0.7.11

FFmpeg 0.7.12

0.7.12

FFmpeg 0.8.0

0.8.0

FFmpeg 0.8.1

0.8.1

FFmpeg 0.8.2

0.8.2

FFmpeg 0.8.5

0.8.5

FFmpeg 0.8.5.3

0.8.5.3

FFmpeg 0.8.5.4

0.8.5.4

FFmpeg 0.8.6

0.8.6

FFmpeg 0.8.7

0.8.7

FFmpeg 0.8.8

0.8.8

FFmpeg 0.8.10

0.8.10

FFmpeg 0.8.11

0.8.11

FFmpeg FFmpeg 0.9

0.9

FFmpeg FFmpeg 0.9.1

0.9.1

FFmpeg 0.10

0.10

FFmpeg 0.10.3

0.10.3

libav 0.8

0.8

libav 0.8 beta2

0.8

libav 0.8.1

0.8.1

libav 0.8.2

0.8.2

libav 0.8.3

0.8.3

libav 0.8.4

0.8.4

References

http://ffmpeg.org/security.html

http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=cca9528524c7a4b91451f4322bd50849af5d057e

http://libav.org/releases/libav-0.8.5.changelog

50468

Vendor Advisory

[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?

[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?

55355

USN-1705-1

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.