CVE-2012-0853 in FFmpeg

Résumé

par MITRE

The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 19/01/2012
• Divulgation: 20/08/2012
• Modérer: accepté
• Entrée: VDB-61702
• CPE: prêt
• CWE: CWE-20 (confirmé)
• CVSS: 6.8 (NVD)
• EPSS: 0.04290
• KEV: non
• Activités: très faible
• Secteur: Lawfirm, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-0853
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0853
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-0853/