CVE-2012-0848

2012-08-2019:55:04

Debian Security Bug Tracker

security-tracker.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.6%

JSON

Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka “wrong samples count.”

OSVersionArchitecturePackageVersionFilename
Debian12allffmpeg< 7:5.1.4-0+deb12u1ffmpeg_7:5.1.4-0+deb12u1_all.deb
Debian11allffmpeg< 7:4.3.6-0+deb11u1ffmpeg_7:4.3.6-0+deb11u1_all.deb
Debian10allffmpeg< 7:4.1.9-0+deb10u1ffmpeg_7:4.1.9-0+deb10u1_all.deb
Debian999allffmpeg< 7:6.1.1-4ffmpeg_7:6.1.1-4_all.deb
Debian13allffmpeg< 7:6.1.1-4ffmpeg_7:6.1.1-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ffmpeg	< 7:5.1.4-0+deb12u1	ffmpeg_7:5.1.4-0+deb12u1_all.deb
Debian	11	all	ffmpeg	< 7:4.3.6-0+deb11u1	ffmpeg_7:4.3.6-0+deb11u1_all.deb
Debian	10	all	ffmpeg	< 7:4.1.9-0+deb10u1	ffmpeg_7:4.1.9-0+deb10u1_all.deb
Debian	999	all	ffmpeg	< 7:6.1.1-4	ffmpeg_7:6.1.1-4_all.deb
Debian	13	all	ffmpeg	< 7:6.1.1-4	ffmpeg_7:6.1.1-4_all.deb