CVE-2012-0852: Buffer Overflow

Q: What is the severity of CVE-2012-0852?

CVE-2012-0852 has been classified as a high severity vulnerability due to the potential for remote denial of service and arbitrary code execution.

Q: How do I fix CVE-2012-0852?

To fix CVE-2012-0852, update FFmpeg to version 0.9.1 or later or update Libav to version 0.5.9, 0.6.6, 0.7.6, or 0.8.3 or later.

Q: Which software versions are affected by CVE-2012-0852?

CVE-2012-0852 affects FFmpeg versions prior to 0.9.1 and specific versions of Libav including 0.5.x, 0.6.x, 0.7.x, and 0.8.x before their respective fixed versions.

Q: What types of attacks can exploit CVE-2012-0852?

CVE-2012-0852 can be exploited by attackers to cause an application crash or potentially execute arbitrary code remotely.

Q: Is CVE-2012-0852 a critical vulnerability for my systems?

Yes, CVE-2012-0852 is a critical vulnerability that should be addressed promptly to protect systems utilizing affected versions of FFmpeg and Libav.

Published Aug 20, 2012

Updated

The adpcmdecodeframe function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.

Affected Software

38 affected components

FFmpeg FFmpeg<=0.9

FFmpeg FFmpeg=0.7.1

FFmpeg FFmpeg=0.7.2

FFmpeg FFmpeg=0.7.7

FFmpeg FFmpeg=0.7.8

FFmpeg FFmpeg=0.7.9

FFmpeg FFmpeg=0.7.11

FFmpeg FFmpeg=0.7.12

FFmpeg FFmpeg=0.8.5

FFmpeg FFmpeg=0.8.6

FFmpeg FFmpeg=0.8.7

FFmpeg FFmpeg=0.8.8

FFmpeg FFmpeg=0.8.10

FFmpeg FFmpeg=0.8.11

Libav Libav=0.5

Libav Libav=0.5.1

Libav Libav=0.5.2

Libav Libav=0.5.3

Libav Libav=0.5.4

Libav Libav=0.5.5

Libav Libav=0.5.6

Libav Libav=0.5.7

Libav Libav=0.6

Libav Libav=0.6.1

Libav Libav=0.6.2

Libav Libav=0.6.3

Libav Libav=0.6.4

Libav Libav=0.6.5

Libav Libav=0.7

Libav Libav=0.7.1

Libav Libav=0.7.2

Libav Libav=0.7.3

Libav Libav=0.7.4

Libav Libav=0.7.5

Libav Libav=0.8

Libav Libav=0.8-beta2

Libav Libav=0.8.1

Libav Libav=0.8.2

Event History

Aug 20, 2012

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0852?

CVE-2012-0852 has been classified as a high severity vulnerability due to the potential for remote denial of service and arbitrary code execution.

How do I fix CVE-2012-0852?

To fix CVE-2012-0852, update FFmpeg to version 0.9.1 or later or update Libav to version 0.5.9, 0.6.6, 0.7.6, or 0.8.3 or later.

Which software versions are affected by CVE-2012-0852?