CVE-2012-0823: Input Validation
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0823?
CVE-2012-0823 is classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2012-0823?
To mitigate CVE-2012-0823, upgrade the VP8 Codec SDK (libvpx) to version 1.0.0 or later.
Which versions of libvpx are affected by CVE-2012-0823?
CVE-2012-0823 affects libvpx versions prior to 1.0.0, specifically from 0.9.0 to 0.9.7.
What types of attacks can CVE-2012-0823 enable?
CVE-2012-0823 can allow attackers to cause denial of service through corrupt input or by starting decoding from a P-frame.
Is CVE-2012-0823 a local or remote vulnerability?
CVE-2012-0823 is a remote vulnerability that can be exploited by attackers over a network.