CVE-2012-2802 in FFmpeg

Riassunto

di MITRE

Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 19/05/2012
• Divulgazione: 10/09/2012
• Moderazione: accettato
• Voce: VDB-62230
• CPE: pronto
• CWE: CWE-404 (confermato)
• CVSS: 10.0 (NVD)
• EPSS: 0.00857
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2802
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2802
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2802/