CVE-2012-0847

2022-10-0316:15:38

CWE-119

[email protected]

web.nvd.nist.gov

cve-2012-0847

buffer overflow

avfilter

ffmpeg

denial of service

nvd

security vulnerability

7.1 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.9%

JSON

Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.

Affected configurations

NVD

Node

ffmpegffmpegRange≤0.9

ffmpegffmpegMatch0.7.1

ffmpegffmpegMatch0.7.2

ffmpegffmpegMatch0.7.7

ffmpegffmpegMatch0.7.8

ffmpegffmpegMatch0.7.9

ffmpegffmpegMatch0.7.11

ffmpegffmpegMatch0.7.12

ffmpegffmpegMatch0.8.5

ffmpegffmpegMatch0.8.6

ffmpegffmpegMatch0.8.7

ffmpegffmpegMatch0.8.8

ffmpegffmpegMatch0.8.10

ffmpegffmpegMatch0.8.11

CPENameOperatorVersion
ffmpeg:ffmpegffmpegle0.9
ffmpeg:ffmpegffmpegeq0.7.1
ffmpeg:ffmpegffmpegeq0.7.2
ffmpeg:ffmpegffmpegeq0.7.7
ffmpeg:ffmpegffmpegeq0.7.8
ffmpeg:ffmpegffmpegeq0.7.9
ffmpeg:ffmpegffmpegeq0.7.11
ffmpeg:ffmpegffmpegeq0.7.12
ffmpeg:ffmpegffmpegeq0.8.5
ffmpeg:ffmpegffmpegeq0.8.6

CPE	Name	Operator	Version
ffmpeg:ffmpeg	ffmpeg	le	0.9
ffmpeg:ffmpeg	ffmpeg	eq	0.7.1
ffmpeg:ffmpeg	ffmpeg	eq	0.7.2
ffmpeg:ffmpeg	ffmpeg	eq	0.7.7
ffmpeg:ffmpeg	ffmpeg	eq	0.7.8
ffmpeg:ffmpeg	ffmpeg	eq	0.7.9
ffmpeg:ffmpeg	ffmpeg	eq	0.7.11
ffmpeg:ffmpeg	ffmpeg	eq	0.7.12
ffmpeg:ffmpeg	ffmpeg	eq	0.8.5
ffmpeg:ffmpeg	ffmpeg	eq	0.8.6