Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-6618
HistoryDec 24, 2013 - 12:00 a.m.

CVE-2012-6618

2013-12-2400:00:00
ubuntu.com
ubuntu.com
7

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

EPSS

0.019

Percentile

88.8%

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before
1.0.2, when running with certain -probesize values, allows remote attackers
to cause a denial of service (crash) via a crafted MP3 file, possibly
related to frame size or lack of sufficient “frames to estimate rate.”

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

EPSS

0.019

Percentile

88.8%