CVE

Id
56040  
CVE No.
CVE-2012-2797  
Status
Candidate  
Description
Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough."  
Phase
Assigned (20120519)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
582740 56040 CVE-2012-2797 MLIST:[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11?  View
582741 56040 CVE-2012-2797 URL:http://www.openwall.com/lists/oss-security/2012/08/31/3  View
582742 56040 CVE-2012-2797 MLIST:[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11?  View
582743 56040 CVE-2012-2797 URL:http://www.openwall.com/lists/oss-security/2012/09/02/4  View
582744 56040 CVE-2012-2797 CONFIRM:http://ffmpeg.org/security.html  View
582745 56040 CVE-2012-2797 CONFIRM:http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=cca9528524c7a4b91451f4322bd50849af5d057e  View
582746 56040 CVE-2012-2797 CONFIRM:http://libav.org/releases/libav-0.8.5.changelog  View
582747 56040 CVE-2012-2797 UBUNTU:USN-1705-1  View
582748 56040 CVE-2012-2797 URL:http://www.ubuntu.com/usn/USN-1705-1  View
582749 56040 CVE-2012-2797 BID:55355  View
582750 56040 CVE-2012-2797 URL:http://www.securityfocus.com/bid/55355  View
582751 56040 CVE-2012-2797 SECUNIA:50468  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28603 JVNDB-2012-004310 FFmpeg の libavcodec/ac3dec.c 内の ac3_decode_frame 関数における脆弱性 FFmpeg の libavcodec/ac3dec.c 内の ac3_decode_frame 関数には、不特定の影響を受ける脆弱性が存在します。 CVE-2012-2802 56040 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004310.html  View