Lucene search

K
cve[email protected]CVE-2012-0848
HistoryAug 20, 2012 - 7:55 p.m.

CVE-2012-0848

2012-08-2019:55:04
CWE-119
web.nvd.nist.gov
25
cve-2012-0848
buffer overflow
denial of service
remote attackers
ffmpeg
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%

Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka “wrong samples count.”

Affected configurations

NVD
Node
ffmpegffmpegMatch0.9.1
CPENameOperatorVersion
ffmpeg:ffmpegffmpegeq0.9.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%