Lucene search
Ubuntu.comUB:CVE-2012-2777HistorySep 10, 2012 - 12:00 a.m.
CVE-2012-2777
2012-09-1000:00:00
ubuntu.com
ubuntu.com
9
0.006 Low
EPSS
Percentile
78.5%
Unspecified vulnerability in the decode_pic function in
libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7
and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to
“width/height changing in CAVS,” a different vulnerability than
CVE-2012-2784.
Notes
| Author | Note |
|---|---|
| mdeslaur | ffmpeg-extra in multiverse needs to have matching version libav-extra is built with tarball produced by libav package |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | ffmpeg | < 4:0.5.9-0ubuntu0.10.04.2 | UNKNOWN |
| ubuntu | 10.04 | noarch | ffmpeg-extra | < 4:0.5.9-0ubuntu0.10.04.2 | UNKNOWN |
| ubuntu | 11.10 | noarch | libav | < 4:0.7.6-0ubuntu0.11.10.2 | UNKNOWN |
| ubuntu | 12.04 | noarch | libav | < 4:0.8.4-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | libav | < 6:0.8.4-0ubuntu0.12.10.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | libav-extra | < 4:0.7.6ubuntu0.11.10.2 | UNKNOWN |
| ubuntu | 12.04 | noarch | libav-extra | < 4:0.8.4ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | libav-extra | < 6:0.8.4ubuntu0.12.10.1 | UNKNOWN |
References
ffmpeg.org/security.html
secunia.com/advisories/50468
www.openwall.com/lists/oss-security/2012/08/31/3
www.openwall.com/lists/oss-security/2012/09/02/4
launchpad.net/bugs/cve/CVE-2012-2777
nvd.nist.gov/vuln/detail/CVE-2012-2777
security-tracker.debian.org/tracker/CVE-2012-2777
ubuntu.com/security/notices/USN-1630-1
ubuntu.com/security/notices/USN-1674-1
ubuntu.com/security/notices/USN-1675-1
www.cve.org/CVERecord?id=CVE-2012-2777
Related
debiancve
debiancve
CVE-2012-2777
2012-09-10 22:55:00
CVE-2012-2784
2012-09-10 22:55:00
cvelist
cvelist
CVE-2012-2784
2012-09-10 22:00:00
CVE-2012-2777
2012-09-10 22:00:00
cve
cve
CVE-2012-2784
2012-09-10 22:55:00
CVE-2012-2777
2012-09-10 22:55:00
prion
prion
Design/Logic Flaw
2012-09-10 22:55:00
Design/Logic Flaw
2012-09-10 22:55:00
ubuntucve
ubuntucve
CVE-2012-2784
2012-09-10 00:00:00
openvas
openvas
Ubuntu Update for ffmpeg USN-1675-1
2012-12-26 00:00:00
Ubuntu: Security Advisory (USN-1675-1)
2012-12-26 00:00:00
Debian Security Advisory DSA 2624-1 (ffmpeg - several vulnerabilities)
2013-02-16 00:00:00
nessus
nessus
Ubuntu 10.04 LTS : ffmpeg vulnerabilities (USN-1675-1)
2012-12-20 00:00:00
Debian DSA-2624-1 : ffmpeg - several vulnerabilities
2013-02-18 00:00:00
Ubuntu 11.10 : libav vulnerabilities (USN-1674-1)
2012-12-20 00:00:00
ubuntu
ubuntu
FFmpeg vulnerabilities
2012-12-19 00:00:00
Libav vulnerabilities
2012-12-19 00:00:00
Libav vulnerabilities
2012-11-12 00:00:00
debian
debian
[SECURITY] [DSA 2624-1] ffmpeg security update
2013-02-16 18:18:54
gentoo
gentoo
Libav: Multiple vulnerabilities
2014-06-26 00:00:00
FFmpeg: Multiple vulnerabilities
2013-10-25 00:00:00
securityvulns
securityvulns
ffmpeg library multiple security vulnerabilities
2012-06-17 00:00:00
freebsd
freebsd
gstreamer-ffmpeg -- Multiple vulnerabilities in bundled libav
2013-08-20 00:00:00