Lucene search

ChromeCVE-2012-2775

HistorySep 10, 2012 - 10:55 p.m.

CVE-2012-2775

2012-09-1022:55:03

Chrome

web.nvd.nist.gov

vulnerability

read_var_block_data

libavcodec

alsdec.c

ffmpeg

libav

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.2

Confidence

High

EPSS

0.006

Percentile

78.6%

JSON

Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an “out of array write in quant_cof.”

Affected configurations

Nvd

Node

libavlibavMatch0.8

libavlibavMatch0.8beta2

libavlibavMatch0.8.1

libavlibavMatch0.8.2

libavlibavMatch0.8.3

Node

libavlibavMatch0.7

libavlibavMatch0.7beta1

libavlibavMatch0.7beta2

libavlibavMatch0.7.1

libavlibavMatch0.7.2

libavlibavMatch0.7.3

libavlibavMatch0.7.4

libavlibavMatch0.7.5

libavlibavMatch0.7.6

Node

ffmpegffmpegRange≤0.10.4

ffmpegffmpegMatch0.3

ffmpegffmpegMatch0.3.1

ffmpegffmpegMatch0.3.2

ffmpegffmpegMatch0.3.3

ffmpegffmpegMatch0.3.4

ffmpegffmpegMatch0.4.0

ffmpegffmpegMatch0.4.2

ffmpegffmpegMatch0.4.3

ffmpegffmpegMatch0.4.4

ffmpegffmpegMatch0.4.5

ffmpegffmpegMatch0.4.6

ffmpegffmpegMatch0.4.7

ffmpegffmpegMatch0.4.8

ffmpegffmpegMatch0.4.9

ffmpegffmpegMatch0.4.9pre1

ffmpegffmpegMatch0.5

ffmpegffmpegMatch0.5.1

ffmpegffmpegMatch0.5.2

ffmpegffmpegMatch0.5.3

ffmpegffmpegMatch0.5.4

ffmpegffmpegMatch0.5.4.5

ffmpegffmpegMatch0.5.4.6

ffmpegffmpegMatch0.6

ffmpegffmpegMatch0.6.1

ffmpegffmpegMatch0.6.2

ffmpegffmpegMatch0.6.3

ffmpegffmpegMatch0.7

ffmpegffmpegMatch0.7.1

ffmpegffmpegMatch0.7.2

ffmpegffmpegMatch0.7.3

ffmpegffmpegMatch0.7.4

ffmpegffmpegMatch0.7.5

ffmpegffmpegMatch0.7.6

ffmpegffmpegMatch0.7.7

ffmpegffmpegMatch0.7.8

ffmpegffmpegMatch0.7.9

ffmpegffmpegMatch0.7.11

ffmpegffmpegMatch0.7.12

ffmpegffmpegMatch0.8.0

ffmpegffmpegMatch0.8.1

ffmpegffmpegMatch0.8.2

ffmpegffmpegMatch0.8.5

ffmpegffmpegMatch0.8.5.3

ffmpegffmpegMatch0.8.5.4

ffmpegffmpegMatch0.8.6

ffmpegffmpegMatch0.8.7

ffmpegffmpegMatch0.8.8

ffmpegffmpegMatch0.8.10

ffmpegffmpegMatch0.8.11

ffmpegffmpegMatch0.9

ffmpegffmpegMatch0.9.1

ffmpegffmpegMatch0.10

ffmpegffmpegMatch0.10.3

VendorProductVersionCPE
libavlibav0.8cpe:2.3:a:libav:libav:0.8:*:*:*:*:*:*:*
libavlibav0.8cpe:2.3:a:libav:libav:0.8:beta2:*:*:*:*:*:*
libavlibav0.8.1cpe:2.3:a:libav:libav:0.8.1:*:*:*:*:*:*:*
libavlibav0.8.2cpe:2.3:a:libav:libav:0.8.2:*:*:*:*:*:*:*
libavlibav0.8.3cpe:2.3:a:libav:libav:0.8.3:*:*:*:*:*:*:*
libavlibav0.7cpe:2.3:a:libav:libav:0.7:*:*:*:*:*:*:*
libavlibav0.7cpe:2.3:a:libav:libav:0.7:beta1:*:*:*:*:*:*
libavlibav0.7cpe:2.3:a:libav:libav:0.7:beta2:*:*:*:*:*:*
libavlibav0.7.1cpe:2.3:a:libav:libav:0.7.1:*:*:*:*:*:*:*
libavlibav0.7.2cpe:2.3:a:libav:libav:0.7.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libav	libav	0.8	cpe:2.3:a:libav:libav:0.8:::::::*
libav	libav	0.8	cpe:2.3:a:libav:libav:0.8:beta2::::::
libav	libav	0.8.1	cpe:2.3:a:libav:libav:0.8.1:::::::*
libav	libav	0.8.2	cpe:2.3:a:libav:libav:0.8.2:::::::*
libav	libav	0.8.3	cpe:2.3:a:libav:libav:0.8.3:::::::*
libav	libav	0.7	cpe:2.3:a:libav:libav:0.7:::::::*
libav	libav	0.7	cpe:2.3:a:libav:libav:0.7:beta1::::::
libav	libav	0.7	cpe:2.3:a:libav:libav:0.7:beta2::::::
libav	libav	0.7.1	cpe:2.3:a:libav:libav:0.7.1:::::::*
libav	libav	0.7.2	cpe:2.3:a:libav:libav:0.7.2:::::::*