CVE-2012-0855: Buffer Overflow
Published Aug 27, 2012
·Updated
Heap-based buffer overflow in the getsot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to the curtileno variable.
Affected Software
43 affected components
FFmpeg FFmpeg<=0.9
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.9
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.5.2
FFmpeg FFmpeg=0.5.3
FFmpeg FFmpeg=0.5.4
FFmpeg FFmpeg=0.6
FFmpeg FFmpeg=0.6.1
FFmpeg FFmpeg=0.6.2
FFmpeg FFmpeg=0.7
FFmpeg FFmpeg=0.7.1
FFmpeg FFmpeg=0.7.2
FFmpeg FFmpeg=0.7.3
FFmpeg FFmpeg=0.7.6
FFmpeg FFmpeg=0.7.7
FFmpeg FFmpeg=0.7.8
FFmpeg FFmpeg=0.7.9
FFmpeg FFmpeg=0.7.11
FFmpeg FFmpeg=0.7.12
FFmpeg FFmpeg=0.8.0
FFmpeg FFmpeg=0.8.1
FFmpeg FFmpeg=0.8.2
FFmpeg FFmpeg=0.8.5
FFmpeg FFmpeg=0.8.6
FFmpeg FFmpeg=0.8.7
FFmpeg FFmpeg=0.8.8
FFmpeg FFmpeg=0.8.10
FFmpeg FFmpeg=0.8.11
Remediation
Event History
Aug 27, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0855?
CVE-2012-0855 has a severity that can lead to application crashes due to a heap-based buffer overflow.
2
How do I fix CVE-2012-0855?
To fix CVE-2012-0855, upgrade FFmpeg to version 0.9.1 or later.
3
What software is affected by CVE-2012-0855?
CVE-2012-0855 affects multiple versions of FFmpeg prior to 0.9.1.
4
Can CVE-2012-0855 be exploited remotely?
Yes, CVE-2012-0855 can be exploited remotely by attackers via unspecified vectors.
5
What type of vulnerability is CVE-2012-0855?
CVE-2012-0855 is classified as a heap-based buffer overflow vulnerability.