CVE-2012-2786: Critical severity Libav Libav vulnerability
Published Sep 10, 2012
·Updated
Unspecified vulnerability in the decodewdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."
Affected Software
68 affected components
Libav Libav=0.8
Libav Libav=0.8-beta2
Libav Libav=0.8.1
Libav Libav=0.8.2
Libav Libav=0.8.3
Libav Libav=0.7
Libav Libav=0.7-beta1
Libav Libav=0.7-beta2
Libav Libav=0.7.1
Libav Libav=0.7.2
Libav Libav=0.7.3
Libav Libav=0.7.4
Libav Libav=0.7.5
Libav Libav=0.7.6
FFmpeg FFmpeg<=0.10.4
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.9
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.5.2
FFmpeg FFmpeg=0.5.3
FFmpeg FFmpeg=0.5.4
FFmpeg FFmpeg=0.5.4.5
FFmpeg FFmpeg=0.5.4.6
FFmpeg FFmpeg=0.6
FFmpeg FFmpeg=0.6.1
FFmpeg FFmpeg=0.6.2
FFmpeg FFmpeg=0.6.3
FFmpeg FFmpeg=0.7
FFmpeg FFmpeg=0.7.1
FFmpeg FFmpeg=0.7.2
FFmpeg FFmpeg=0.7.3
FFmpeg FFmpeg=0.7.4
FFmpeg FFmpeg=0.7.5
FFmpeg FFmpeg=0.7.6
FFmpeg FFmpeg=0.7.7
FFmpeg FFmpeg=0.7.8
FFmpeg FFmpeg=0.7.9
FFmpeg FFmpeg=0.7.11
FFmpeg FFmpeg=0.7.12
FFmpeg FFmpeg=0.8.0
FFmpeg FFmpeg=0.8.1
FFmpeg FFmpeg=0.8.2
FFmpeg FFmpeg=0.8.5
FFmpeg FFmpeg=0.8.5.3
FFmpeg FFmpeg=0.8.5.4
FFmpeg FFmpeg=0.8.6
FFmpeg FFmpeg=0.8.7
FFmpeg FFmpeg=0.8.8
FFmpeg FFmpeg=0.8.10
FFmpeg FFmpeg=0.8.11
FFmpeg FFmpeg=0.9
FFmpeg FFmpeg=0.9.1
FFmpeg FFmpeg=0.10
FFmpeg FFmpeg=0.10.3
Remediation
Event History
Sep 10, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2786?
The severity of CVE-2012-2786 has not been clearly defined due to its unspecified impact and attack vectors.
2
How do I fix CVE-2012-2786?
To fix CVE-2012-2786, upgrade to Libav version 0.7.7 or higher and FFmpeg version 0.11 or higher.
3
What software is affected by CVE-2012-2786?
CVE-2012-2786 affects Libav versions before 0.7.7 and 0.8.x before 0.8.4, as well as FFmpeg versions before 0.11.
4
What vulnerability does CVE-2012-2786 relate to?
CVE-2012-2786 relates to an 'out of array write' vulnerability found in the decode_wdlt function.
5
Are there known attack vectors for CVE-2012-2786?
CVE-2012-2786 has unknown attack vectors, making it difficult to assess potential exploitation.