CVE-2012-2802

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-2802
Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af
http://libav.org/releases/libav-0.8.4.changelog
http://libav.org/releases/libav-0.8.5.changelog
http://secunia.com/advisories/50468
http://secunia.com/advisories/51257
http://www.mandriva.com/security/advisories?name=MDVSA-2013:079
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://www.securityfocus.com/bid/55355
http://www.ubuntu.com/usn/USN-1705-1
http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af
http://libav.org/releases/libav-0.8.4.changelog
http://libav.org/releases/libav-0.8.5.changelog
http://secunia.com/advisories/50468
http://secunia.com/advisories/51257
http://www.mandriva.com/security/advisories?name=MDVSA-2013:079
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://www.securityfocus.com/bid/55355
http://www.ubuntu.com/usn/USN-1705-1
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:libav:libav:0.8:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8:beta2:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8.3:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.6.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.9:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.11:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.12:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.5.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.10:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.11:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.9:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.9.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.10:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.10.3:*:*:*:*:*:*:*
History

21 Nov 2024, 01:39

Type Values Removed Values Added
References () http://ffmpeg.org/security.html - () http://ffmpeg.org/security.html -
References () http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af - () http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af -
References () http://libav.org/releases/libav-0.8.4.changelog - () http://libav.org/releases/libav-0.8.4.changelog -
References () http://libav.org/releases/libav-0.8.5.changelog - () http://libav.org/releases/libav-0.8.5.changelog -
References () http://secunia.com/advisories/50468 - () http://secunia.com/advisories/50468 -
References () http://secunia.com/advisories/51257 - () http://secunia.com/advisories/51257 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 - () http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 -
References () http://www.openwall.com/lists/oss-security/2012/08/31/3 - () http://www.openwall.com/lists/oss-security/2012/08/31/3 -
References () http://www.openwall.com/lists/oss-security/2012/09/02/4 - () http://www.openwall.com/lists/oss-security/2012/09/02/4 -
References () http://www.securityfocus.com/bid/55355 - () http://www.securityfocus.com/bid/55355 -
References () http://www.ubuntu.com/usn/USN-1705-1 - () http://www.ubuntu.com/usn/USN-1705-1 -

07 Nov 2023, 02:10

Type Values Removed Values Added
References
  • {'url': 'http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2c22701c371c2f3dea21fcdbb97c981939fb77af', 'name': 'http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2c22701c371c2f3dea21fcdbb97c981939fb77af', 'tags': [], 'refsource': 'CONFIRM'}
  • () http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af -
References (BID) http://www.securityfocus.com/bid/55355 - () http://www.securityfocus.com/bid/55355 -
References (MLIST) http://www.openwall.com/lists/oss-security/2012/09/02/4 - () http://www.openwall.com/lists/oss-security/2012/09/02/4 -
References (CONFIRM) http://libav.org/releases/libav-0.8.5.changelog - () http://libav.org/releases/libav-0.8.5.changelog -
References (MLIST) http://www.openwall.com/lists/oss-security/2012/08/31/3 - () http://www.openwall.com/lists/oss-security/2012/08/31/3 -
References (SECUNIA) http://secunia.com/advisories/51257 - Vendor Advisory () http://secunia.com/advisories/51257 -
References (SECUNIA) http://secunia.com/advisories/50468 - Vendor Advisory () http://secunia.com/advisories/50468 -
References (CONFIRM) http://libav.org/releases/libav-0.8.4.changelog - () http://libav.org/releases/libav-0.8.4.changelog -
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 - () http://www.mandriva.com/security/advisories?name=MDVSA-2013:079 -
References (CONFIRM) http://ffmpeg.org/security.html - () http://ffmpeg.org/security.html -
References (UBUNTU) http://www.ubuntu.com/usn/USN-1705-1 - () http://www.ubuntu.com/usn/USN-1705-1 -
Information

Published : 2012-09-10 22:55

Updated : 2024-11-21 01:39

NVD link : CVE-2012-2802

Mitre link : CVE-2012-2802

CVE.ORG link : CVE-2012-2802

JSON object : View

Products Affected

libav

  • libav

ffmpeg

  • ffmpeg
CWE
NVD-CWE-noinfo

NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024