CVE-2012-2783: Critical severity FFmpeg FFmpeg vulnerability
Published Sep 10, 2012
·Updated
Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to "freeing the returned frame."
Affected Software
69 affected components
FFmpeg FFmpeg<=0.10.4
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.9
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.5.2
FFmpeg FFmpeg=0.5.3
FFmpeg FFmpeg=0.5.4
FFmpeg FFmpeg=0.5.4.5
FFmpeg FFmpeg=0.5.4.6
FFmpeg FFmpeg=0.6
FFmpeg FFmpeg=0.6.1
FFmpeg FFmpeg=0.6.2
FFmpeg FFmpeg=0.6.3
FFmpeg FFmpeg=0.7
FFmpeg FFmpeg=0.7.1
FFmpeg FFmpeg=0.7.2
FFmpeg FFmpeg=0.7.3
FFmpeg FFmpeg=0.7.4
FFmpeg FFmpeg=0.7.5
FFmpeg FFmpeg=0.7.6
FFmpeg FFmpeg=0.7.7
FFmpeg FFmpeg=0.7.8
FFmpeg FFmpeg=0.7.9
FFmpeg FFmpeg=0.7.11
FFmpeg FFmpeg=0.7.12
FFmpeg FFmpeg=0.8.0
FFmpeg FFmpeg=0.8.1
FFmpeg FFmpeg=0.8.2
FFmpeg FFmpeg=0.8.5
FFmpeg FFmpeg=0.8.5.3
FFmpeg FFmpeg=0.8.5.4
FFmpeg FFmpeg=0.8.6
FFmpeg FFmpeg=0.8.7
FFmpeg FFmpeg=0.8.8
FFmpeg FFmpeg=0.8.10
FFmpeg FFmpeg=0.8.11
FFmpeg FFmpeg=0.9
FFmpeg FFmpeg=0.9.1
FFmpeg FFmpeg=0.10
FFmpeg FFmpeg=0.10.3
Libav Libav=0.8
Libav Libav=0.8-beta2
Libav Libav=0.8.1
Libav Libav=0.8.2
Libav Libav=0.8.3
Libav Libav=0.8.4
Libav Libav=0.7
Libav Libav=0.7-beta1
Libav Libav=0.7-beta2
Libav Libav=0.7.1
Libav Libav=0.7.2
Libav Libav=0.7.3
Libav Libav=0.7.4
Libav Libav=0.7.5
Libav Libav=0.7.6
Event History
Sep 10, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2783?
The severity of CVE-2012-2783 is currently classified as unspecified, indicating unknown impact and attack vectors.
2
How do I fix CVE-2012-2783?
To address CVE-2012-2783, upgrade FFmpeg to version 0.11 or later, or Libav to versions 0.7.7 or 0.8.5 or later.
3
What versions of FFmpeg are affected by CVE-2012-2783?
FFmpeg versions prior to 0.11, including all versions from 0.3 to 0.10.4, are affected by CVE-2012-2783.
4
What versions of Libav are impacted by CVE-2012-2783?
Libav versions before 0.7.7 and 0.8.x before 0.8.5 are vulnerable to CVE-2012-2783.
5
Is CVE-2012-2783 exploit-related to memory management?
Yes, CVE-2012-2783 is related to an issue with 'freeing the returned frame,' indicating a potential memory management vulnerability.