CVE-2012-2796 — Ffmpeg vulnerability

4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
0.8%
top 25.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
FfmpegLibavDebian Ffmpeg
Timeline
PublishedSep 10
Latest updateMay 14

Description

Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDffmpeg/ffmpeg0.10.4+52
▶NVDlibav/libav4 versions+3
▶debiandebian/ffmpeg

🔴Vulnerability Details

1
GHSA
GHSA-8fvv-pqph-jh9m: Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec↗2022-05-14
▶

📋Vendor Advisories

2
Ubuntu
Libav vulnerabilities↗2012-11-12
▶
Debian
CVE-2012-2796: ffmpeg - Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec....↗2012
▶