Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-0847
HistoryAug 20, 2012 - 12:00 a.m.

CVE-2012-0847

2012-08-2000:00:00
ubuntu.com
ubuntu.com
8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.007

Percentile

80.1%

Heap-based buffer overflow in the avfilter_filter_samples function in
libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to
cause a denial of service (application crash) via a crafted media file.

Notes

Author Note
jdstrand per upstream, “Simple case of missing check, there wasnt much using the audio filters so this probably is not practically exploitable”
mdeslaur code not present in ffmpeg 0.5.x code is different in libav, doesn’t appear vulnerable.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.007

Percentile

80.1%

Related for UB:CVE-2012-0847