CVE-2012-0848: Buffer Overflow
Published Aug 20, 2012
·Updated
Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong samples count."
Affected Software
1 affected component
FFmpeg FFmpeg=0.9.1
Remediation
Event History
Aug 20, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0848?
CVE-2012-0848 is considered a denial of service vulnerability due to a heap-based buffer overflow.
2
How do I fix CVE-2012-0848?
To fix CVE-2012-0848, upgrade to a patched version of FFmpeg that addresses this vulnerability.
3
Which versions of FFmpeg are affected by CVE-2012-0848?
CVE-2012-0848 affects FFmpeg version 0.9.1.
4
What type of attack does CVE-2012-0848 allow?
CVE-2012-0848 allows remote attackers to execute a denial of service attack by crashing the application.
5
What component of FFmpeg is vulnerable in CVE-2012-0848?
The vulnerability in CVE-2012-0848 exists in the ws_snd_decode_frame function of libavcodec/ws-snd1.c.