NVD

Id
42917  
Name
CVE-2012-0852  
Description
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-20  
Modified Date
2013-01-29  
Seq
2012-0852  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216005 42917 CVE-2012-0852 http://ffmpeg.org/security.html  View
216006 42917 CVE-2012-0852 http://git.videolan.org/?p=ffmpeg.git;a=commit;h=608708009f69ba4cecebf05120c696167494c897  View
216007 42917 CVE-2012-0852 http://libav.org/  View
216008 42917 CVE-2012-0852 DSA-2494  View
216009 42917 CVE-2012-0852 [oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1  View
216010 42917 CVE-2012-0852 USN-1479-1  View
216011 42917 CVE-2012-0852 ffmpeg-adpcmdecodeframe-code-exec(78932)  View
216012 42917 CVE-2012-0852 https://ffmpeg.org/trac/ffmpeg/ticket/794  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28055 JVNDB-2012-003762 FFmpeg および Libav の libavcodec の adpcm.c におけるサービス運用妨害 (DoS) の脆弱性 FFmpeg および Libav の libavcodec の adpcm.c 内の adpcm_decode_frame 関数には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2012-0852 54090 CVE-2012-0852 42917 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003762.html 2012-06-09 2012-08-22 View