Lucene search

K
cveMitreCVE-2012-6615
HistoryDec 24, 2013 - 8:55 p.m.

CVE-2012-6615

2013-12-2420:55:04
mitre
web.nvd.nist.gov
26
cve-2012-6615
ffmpeg
libavcodec
denial of service
null pointer dereference
crash
subtitle dialog
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.007

Percentile

80.6%

The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a subtitle dialog without text.

Affected configurations

Nvd
Node
ffmpegffmpegRange1.0.1
OR
ffmpegffmpegMatch1.0
VendorProductVersionCPE
ffmpegffmpeg*cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
ffmpegffmpeg1.0cpe:2.3:a:ffmpeg:ffmpeg:1.0:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.007

Percentile

80.6%