CVE

Id
56031  
CVE No.
CVE-2012-2788  
Status
Candidate  
Description
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."  
Phase
Assigned (20120519)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
582618 56031 CVE-2012-2788 MLIST:[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?  View
582619 56031 CVE-2012-2788 URL:http://www.openwall.com/lists/oss-security/2012/08/31/3  View
582620 56031 CVE-2012-2788 MLIST:[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?  View
582621 56031 CVE-2012-2788 URL:http://www.openwall.com/lists/oss-security/2012/09/02/4  View
582622 56031 CVE-2012-2788 CONFIRM:http://ffmpeg.org/security.html  View
582623 56031 CVE-2012-2788 CONFIRM:http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c41ac870470c614185e1752c11f892809022248a  View
582624 56031 CVE-2012-2788 CONFIRM:http://libav.org/releases/libav-0.7.7.changelog  View
582625 56031 CVE-2012-2788 CONFIRM:http://libav.org/releases/libav-0.8.4.changelog  View
582626 56031 CVE-2012-2788 MANDRIVA:MDVSA-2013:079  View
582627 56031 CVE-2012-2788 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:079  View
582628 56031 CVE-2012-2788 BID:55355  View
582629 56031 CVE-2012-2788 URL:http://www.securityfocus.com/bid/55355  View
582630 56031 CVE-2012-2788 SECUNIA:50468  View
582631 56031 CVE-2012-2788 URL:http://secunia.com/advisories/50468  View
582632 56031 CVE-2012-2788 SECUNIA:51257  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28594 JVNDB-2012-004301 FFmpeg の libavcodec/lagarith.c 内の lag_decode_zero_run_line 関数における脆弱性 FFmpeg の libavcodec/lagarith.c 内の lag_decode_zero_run_line 関数には、不特定の影響を受ける脆弱性が存在します。 CVE-2012-2793 56031 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004301.html  View