CVE-2012-2777

2012-09-1022:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2012-2777

ffmpeg

libav

cavsdec.c

vulnerability

nvd

9.1 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.5%

JSON

Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to “width/height changing in CAVS,” a different vulnerability than CVE-2012-2784.

CPENameOperatorVersion
libav:libavlibaveq0.8
libav:libavlibaveq0.8.1
libav:libavlibaveq0.8.2
libav:libavlibaveq0.8.3
ffmpeg:ffmpegffmpegeq0.7.7
ffmpeg:ffmpegffmpegeq0.7.1
ffmpeg:ffmpegffmpegeq0.7.6
ffmpeg:ffmpegffmpegeq0.4.5
ffmpeg:ffmpegffmpegeq0.10.3
ffmpeg:ffmpegffmpegeq0.3.2

CPE	Name	Operator	Version
libav:libav	libav	eq	0.8
libav:libav	libav	eq	0.8.1
libav:libav	libav	eq	0.8.2
libav:libav	libav	eq	0.8.3
ffmpeg:ffmpeg	ffmpeg	eq	0.7.7
ffmpeg:ffmpeg	ffmpeg	eq	0.7.1
ffmpeg:ffmpeg	ffmpeg	eq	0.7.6
ffmpeg:ffmpeg	ffmpeg	eq	0.4.5
ffmpeg:ffmpeg	ffmpeg	eq	0.10.3
ffmpeg:ffmpeg	ffmpeg	eq	0.3.2