NVD

Id
42996  
Name
CVE-2012-0947  
Description
Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-20  
Modified Date
2012-11-26  
Seq
2012-0947  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216418 42996 CVE-2012-0947 http://git.libav.org/?p=libav.git;a=commit;h=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3  View
216419 42996 CVE-2012-0947 http://libav.org/  View
216420 42996 CVE-2012-0947 DSA-2471  View
216421 42996 CVE-2012-0947 [oss-security] 20120503 Security issue in libav/ffmpeg  View
216422 42996 CVE-2012-0947 53389  View
216423 42996 CVE-2012-0947 USN-1479-1  View
216424 42996 CVE-2012-0947 https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28065 JVNDB-2012-003772 Libav の libavcodec におけるヒープベースのバッファオーバーフローの脆弱性 Libav の libavcodec の VQA コーデック (vqavideo.c) 内の vqa_decode_chunk 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-0947 54185 CVE-2012-0947 42996 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003772.html 2012-05-04 2012-08-22 View