CVE-2012-2791: Critical severity FFmpeg FFmpeg vulnerability

Q: What is the severity of CVE-2012-2791?

The severity of CVE-2012-2791 has not been explicitly rated, as it involves unspecified vulnerabilities with unknown impact and attack vectors.

Q: How do I fix CVE-2012-2791?

To mitigate CVE-2012-2791, it is recommended to upgrade FFmpeg to version 0.11 or later and Libav to versions 0.7.7 or 0.8.5 and later.

Q: What affected software is associated with CVE-2012-2791?

CVE-2012-2791 affects multiple versions of FFmpeg and Libav, specifically versions before 0.11 for FFmpeg and versions before 0.7.7 and 0.8.5 for Libav.

Q: What are the attack vectors for CVE-2012-2791?

CVE-2012-2791 is associated with multiple unspecified vulnerabilities, and the exact attack vectors remain unknown.

Q: Is there a CVE report for CVE-2012-2791?

Yes, CVE-2012-2791 is documented in the National Vulnerability Database, highlighting its unspecified vulnerabilities within FFmpeg and Libav.

Published Sep 10, 2012

Updated

Multiple unspecified vulnerabilities in the (1) decodebandhdr function in indeo4.c and (2) ffividecodeblocks function in ivicommon.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."

Affected Software

69 affected components

FFmpeg FFmpeg<=0.10.4

FFmpeg FFmpeg=0.3

FFmpeg FFmpeg=0.3.1

FFmpeg FFmpeg=0.3.2

FFmpeg FFmpeg=0.3.3

FFmpeg FFmpeg=0.3.4

FFmpeg FFmpeg=0.4.0

FFmpeg FFmpeg=0.4.2

FFmpeg FFmpeg=0.4.3

FFmpeg FFmpeg=0.4.4

FFmpeg FFmpeg=0.4.5

FFmpeg FFmpeg=0.4.6

FFmpeg FFmpeg=0.4.7

FFmpeg FFmpeg=0.4.8

FFmpeg FFmpeg=0.4.9

FFmpeg FFmpeg=0.4.9-pre1

FFmpeg FFmpeg=0.5

FFmpeg FFmpeg=0.5.1

FFmpeg FFmpeg=0.5.2

FFmpeg FFmpeg=0.5.3

FFmpeg FFmpeg=0.5.4

FFmpeg FFmpeg=0.5.4.5

FFmpeg FFmpeg=0.5.4.6

FFmpeg FFmpeg=0.6

FFmpeg FFmpeg=0.6.1

FFmpeg FFmpeg=0.6.2

FFmpeg FFmpeg=0.6.3

FFmpeg FFmpeg=0.7

FFmpeg FFmpeg=0.7.1

FFmpeg FFmpeg=0.7.2

FFmpeg FFmpeg=0.7.3

FFmpeg FFmpeg=0.7.4

FFmpeg FFmpeg=0.7.5

FFmpeg FFmpeg=0.7.6

FFmpeg FFmpeg=0.7.7

FFmpeg FFmpeg=0.7.8

FFmpeg FFmpeg=0.7.9

FFmpeg FFmpeg=0.7.11

FFmpeg FFmpeg=0.7.12

FFmpeg FFmpeg=0.8.0

FFmpeg FFmpeg=0.8.1

FFmpeg FFmpeg=0.8.2

FFmpeg FFmpeg=0.8.5

FFmpeg FFmpeg=0.8.5.3

FFmpeg FFmpeg=0.8.5.4

FFmpeg FFmpeg=0.8.6

FFmpeg FFmpeg=0.8.7

FFmpeg FFmpeg=0.8.8

FFmpeg FFmpeg=0.8.10

FFmpeg FFmpeg=0.8.11

FFmpeg FFmpeg=0.9

FFmpeg FFmpeg=0.9.1

FFmpeg FFmpeg=0.10

FFmpeg FFmpeg=0.10.3

Libav Libav=0.8

Libav Libav=0.8-beta2

Libav Libav=0.8.1

Libav Libav=0.8.2

Libav Libav=0.8.3

Libav Libav=0.8.4

Libav Libav=0.7

Libav Libav=0.7-beta1

Libav Libav=0.7-beta2

Libav Libav=0.7.1

Libav Libav=0.7.2

Libav Libav=0.7.3

Libav Libav=0.7.4

Libav Libav=0.7.5

Libav Libav=0.7.6

Event History

Sep 10, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2791?

The severity of CVE-2012-2791 has not been explicitly rated, as it involves unspecified vulnerabilities with unknown impact and attack vectors.

How do I fix CVE-2012-2791?

To mitigate CVE-2012-2791, it is recommended to upgrade FFmpeg to version 0.11 or later and Libav to versions 0.7.7 or 0.8.5 and later.

What affected software is associated with CVE-2012-2791?