CVE-2012-2798: Critical severity Libav Libav vulnerability
Published Sep 10, 2012
·Updated
Unspecified vulnerability in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."
Affected Software
68 affected components
Libav Libav=0.8
Libav Libav=0.8-beta2
Libav Libav=0.8.1
Libav Libav=0.8.2
Libav Libav=0.8.3
FFmpeg FFmpeg<=0.10.4
FFmpeg FFmpeg=0.3
FFmpeg FFmpeg=0.3.1
FFmpeg FFmpeg=0.3.2
FFmpeg FFmpeg=0.3.3
FFmpeg FFmpeg=0.3.4
FFmpeg FFmpeg=0.4.0
FFmpeg FFmpeg=0.4.2
FFmpeg FFmpeg=0.4.3
FFmpeg FFmpeg=0.4.4
FFmpeg FFmpeg=0.4.5
FFmpeg FFmpeg=0.4.6
FFmpeg FFmpeg=0.4.7
FFmpeg FFmpeg=0.4.8
FFmpeg FFmpeg=0.4.9
FFmpeg FFmpeg=0.4.9-pre1
FFmpeg FFmpeg=0.5
FFmpeg FFmpeg=0.5.1
FFmpeg FFmpeg=0.5.2
FFmpeg FFmpeg=0.5.3
FFmpeg FFmpeg=0.5.4
FFmpeg FFmpeg=0.5.4.5
FFmpeg FFmpeg=0.5.4.6
FFmpeg FFmpeg=0.6
FFmpeg FFmpeg=0.6.1
FFmpeg FFmpeg=0.6.2
FFmpeg FFmpeg=0.6.3
FFmpeg FFmpeg=0.7
FFmpeg FFmpeg=0.7.1
FFmpeg FFmpeg=0.7.2
FFmpeg FFmpeg=0.7.3
FFmpeg FFmpeg=0.7.4
FFmpeg FFmpeg=0.7.5
FFmpeg FFmpeg=0.7.6
FFmpeg FFmpeg=0.7.7
FFmpeg FFmpeg=0.7.8
FFmpeg FFmpeg=0.7.9
FFmpeg FFmpeg=0.7.11
FFmpeg FFmpeg=0.7.12
FFmpeg FFmpeg=0.8.0
FFmpeg FFmpeg=0.8.1
FFmpeg FFmpeg=0.8.2
FFmpeg FFmpeg=0.8.5
FFmpeg FFmpeg=0.8.5.3
FFmpeg FFmpeg=0.8.5.4
FFmpeg FFmpeg=0.8.6
FFmpeg FFmpeg=0.8.7
FFmpeg FFmpeg=0.8.8
FFmpeg FFmpeg=0.8.10
FFmpeg FFmpeg=0.8.11
FFmpeg FFmpeg=0.9
FFmpeg FFmpeg=0.9.1
FFmpeg FFmpeg=0.10
FFmpeg FFmpeg=0.10.3
Libav Libav=0.7
Libav Libav=0.7-beta1
Libav Libav=0.7-beta2
Libav Libav=0.7.1
Libav Libav=0.7.2
Libav Libav=0.7.3
Libav Libav=0.7.4
Libav Libav=0.7.5
Libav Libav=0.7.6
Event History
Sep 10, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2798?
The severity of CVE-2012-2798 has not been explicitly defined, but it is related to an out of array write in the FFmpeg and Libav libraries.
2
How do I fix CVE-2012-2798?
To fix CVE-2012-2798, upgrade FFmpeg to version 0.11 or later, or Libav to version 0.7.7 or later.
3
Which versions of FFmpeg are affected by CVE-2012-2798?
CVE-2012-2798 affects FFmpeg versions up to and including 0.10.4.
4
Which versions of Libav are affected by CVE-2012-2798?
CVE-2012-2798 affects Libav versions prior to 0.7.7 and versions in the 0.8.x series before 0.8.4.
5
What impact does CVE-2012-2798 have?
The impact of CVE-2012-2798 is unknown, but it involves an out of array write that could potentially lead to exploitation.