CVE-2012-0854: Buffer Overflow
The dpcmdecodeframe function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which triggers a heap-based buffer overflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0854?
CVE-2012-0854 has a high severity rating due to its potential to cause a denial of service by triggering a heap-based buffer overflow.
How do I fix CVE-2012-0854?
To fix CVE-2012-0854, you should update FFmpeg to version 0.9.1 or later, as the vulnerability has been patched in these versions.
What versions of FFmpeg are affected by CVE-2012-0854?
CVE-2012-0854 affects all FFmpeg versions before 0.9.1, including but not limited to versions 0.3 through 0.8.11.
Can CVE-2012-0854 be exploited remotely?
Yes, CVE-2012-0854 can be exploited remotely, allowing attackers to cause application crashes on systems using vulnerable FFmpeg versions.
What is the nature of the vulnerability in CVE-2012-0854?
CVE-2012-0854 is due to improper pointer usage in the dpcm_decode_frame function, leading to potential heap-based buffer overflow.