CVE-2012-2801

2012-09-1000:00:00

ubuntu.com

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.7%

JSON

Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and
Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and
attack vectors, related to dimensions and “out of array writes.”

Notes

Author	Note
mdeslaur	ffmpeg-extra in multiverse needs to have matching version libav-extra is built with tarball produced by libav package

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchffmpeg< 4:0.5.9-0ubuntu0.10.04.2UNKNOWN
ubuntu10.04noarchffmpeg-extra< 4:0.5.9-0ubuntu0.10.04.2UNKNOWN
ubuntu11.10noarchlibav< 4:0.7.6-0ubuntu0.11.10.2UNKNOWN
ubuntu12.04noarchlibav< 4:0.8.4-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchlibav< 6:0.8.4-0ubuntu0.12.10.1UNKNOWN
ubuntu11.10noarchlibav-extra< 4:0.7.6ubuntu0.11.10.2UNKNOWN
ubuntu12.04noarchlibav-extra< 4:0.8.4ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchlibav-extra< 6:0.8.4ubuntu0.12.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	ffmpeg	< 4:0.5.9-0ubuntu0.10.04.2	UNKNOWN
ubuntu	10.04	noarch	ffmpeg-extra	< 4:0.5.9-0ubuntu0.10.04.2	UNKNOWN
ubuntu	11.10	noarch	libav	< 4:0.7.6-0ubuntu0.11.10.2	UNKNOWN
ubuntu	12.04	noarch	libav	< 4:0.8.4-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	libav	< 6:0.8.4-0ubuntu0.12.10.1	UNKNOWN
ubuntu	11.10	noarch	libav-extra	< 4:0.7.6ubuntu0.11.10.2	UNKNOWN
ubuntu	12.04	noarch	libav-extra	< 4:0.8.4ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	libav-extra	< 6:0.8.4ubuntu0.12.10.1	UNKNOWN