[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-2775Date: (C)2012-09-10   (M)2023-12-22


Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
-50468
-51257
-55355
MDVSA-2013:079
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=9d3032b960ae03066c008d6e6774f68b17a1d69d
http://libav.org/releases/libav-0.7.7.changelog
http://libav.org/releases/libav-0.8.4.changelog

CPE    67
cpe:/a:ffmpeg:ffmpeg:0.10
cpe:/a:ffmpeg:ffmpeg:0.8.10
cpe:/a:ffmpeg:ffmpeg:0.8.11
cpe:/a:ffmpeg:ffmpeg:0.4.9:pre1
...
OVAL    2
oval:org.secpod.oval:def:701065
oval:org.secpod.oval:def:701115

© SecPod Technologies