CVE

Id
58387  
CVE No.
CVE-2012-5144  
Status
Candidate  
Description
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."  
Phase
Assigned (20120924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
599318 58387 CVE-2012-5144 CONFIRM:http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html  View
599319 58387 CVE-2012-5144 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=161639  View
599320 58387 CVE-2012-5144 CONFIRM:http://libav.org/releases/libav-0.7.7.changelog  View
599321 58387 CVE-2012-5144 CONFIRM:http://libav.org/releases/libav-0.8.5.changelog  View
599322 58387 CVE-2012-5144 SUSE:openSUSE-SU-2012:1682  View
599323 58387 CVE-2012-5144 URL:http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html  View
599324 58387 CVE-2012-5144 UBUNTU:USN-1705-1  View
599325 58387 CVE-2012-5144 URL:http://www.ubuntu.com/usn/USN-1705-1  View
599326 58387 CVE-2012-5144 OVAL:oval:org.mitre.oval:def:16007  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19524 JVNDB-2013-001099 Google Chrome の audio IPC レイヤーにおける整数オーバーフローの脆弱性 Google Chrome の audio IPC レイヤーには、整数オーバーフローの脆弱性が存在します。 CVE-2012-5149 58387 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001099.html  View