NVD

Id
42921  
Name
CVE-2012-0856  
Description
Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted H263 media file. NOTE: this vulnerability exists because of a regression error.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-08-20  
Modified Date
2013-01-29  
Seq
2012-0856  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216028 42921 CVE-2012-0856 http://ffmpeg.org/security.html  View
216029 42921 CVE-2012-0856 http://ffmpeg.org/trac/ffmpeg/ticket/757  View
216030 42921 CVE-2012-0856 http://git.videolan.org/?p=ffmpeg.git;a=commit;h=21270cffaeab2f67a613907516b2b0cd6c9eacf4  View
216031 42921 CVE-2012-0856 [oss-security] 20120201 Re: CVE Requests for FFmpeg 0.9.1  View
216032 42921 CVE-2012-0856 [oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1  View
216033 42921 CVE-2012-0856 ffmpeg-mpvframestart-bo(78928)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34874 JVNDB-2011-005116 FFmpeg の libavcodec/mpegvideo.c におけるヒープベースのバッファオーバーフローの脆弱性 FFmpeg の libavcodec/mpegvideo.c の MPV_frame_start 関数には、lowres オプションが有効になっている場合、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-0856 54094 CVE-2012-0856 42921 2.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005116.html 2011-12-15 2012-08-22 View