Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2786
HistorySep 10, 2012 - 12:00 a.m.

CVE-2012-2786

2012-09-1000:00:00
ubuntu.com
ubuntu.com
5

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.006

Percentile

78.6%

Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c
in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4,
has unknown impact and attack vectors, related to an “out of array write.”

Notes

Author Note
mdeslaur ffmpeg-extra in multiverse needs to have matching version libav-extra is built with tarball produced by libav package as of 2012-12-18, not in libav codebase http://patches.libav.org/patch/20291/ Probably fixed in libav by http://git.libav.org/?p=libav.git;a=commitdiff;h=8099187e897ddc90cb3902332c76fb2542dac308
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchlibav< 4:0.7.6-0ubuntu0.11.10.2UNKNOWN
ubuntu12.04noarchlibav< 4:0.8.4-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchlibav< 6:0.8.4-0ubuntu0.12.10.1UNKNOWN
ubuntu11.10noarchlibav-extra< 4:0.7.6ubuntu0.11.10.2UNKNOWN
ubuntu12.04noarchlibav-extra< 4:0.8.4ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchlibav-extra< 6:0.8.4ubuntu0.12.10.1UNKNOWN

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.006

Percentile

78.6%