CVE-2012-2802: Critical severity Libav Libav vulnerability

Q: What is the severity of CVE-2012-2802?

The severity of CVE-2012-2802 is currently unspecified due to the unknown impact and attack vectors.

Q: How do I fix CVE-2012-2802?

To fix CVE-2012-2802, you should upgrade to a patched version of FFmpeg or Libav beyond the vulnerable versions listed.

Q: Which software versions are affected by CVE-2012-2802?

CVE-2012-2802 affects certain versions of FFmpeg before 0.11 and Libav before 0.8.4.

Q: Is there a specific function associated with CVE-2012-2802?

Yes, CVE-2012-2802 is related to the ac3_decode_frame function in the libavcodec/ac3dec.c file.

Q: What are the potential impacts of CVE-2012-2802?

The potential impacts of CVE-2012-2802 are not fully known, but it involves issues with the number of output channels and out-of-array writes.

Published Sep 10, 2012

Updated

Unspecified vulnerability in the ac3decodeframe function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."

Affected Software

59 affected components

Libav Libav=0.8

Libav Libav=0.8-beta2

Libav Libav=0.8.1

Libav Libav=0.8.2

Libav Libav=0.8.3

FFmpeg FFmpeg<=0.10.4

FFmpeg FFmpeg=0.3

FFmpeg FFmpeg=0.3.1

FFmpeg FFmpeg=0.3.2

FFmpeg FFmpeg=0.3.3

FFmpeg FFmpeg=0.3.4

FFmpeg FFmpeg=0.4.0

FFmpeg FFmpeg=0.4.2

FFmpeg FFmpeg=0.4.3

FFmpeg FFmpeg=0.4.4

FFmpeg FFmpeg=0.4.5

FFmpeg FFmpeg=0.4.6

FFmpeg FFmpeg=0.4.7

FFmpeg FFmpeg=0.4.8

FFmpeg FFmpeg=0.4.9

FFmpeg FFmpeg=0.4.9-pre1

FFmpeg FFmpeg=0.5

FFmpeg FFmpeg=0.5.1

FFmpeg FFmpeg=0.5.2

FFmpeg FFmpeg=0.5.3

FFmpeg FFmpeg=0.5.4

FFmpeg FFmpeg=0.5.4.5

FFmpeg FFmpeg=0.5.4.6

FFmpeg FFmpeg=0.6

FFmpeg FFmpeg=0.6.1

FFmpeg FFmpeg=0.6.2

FFmpeg FFmpeg=0.6.3

FFmpeg FFmpeg=0.7

FFmpeg FFmpeg=0.7.1

FFmpeg FFmpeg=0.7.2

FFmpeg FFmpeg=0.7.3

FFmpeg FFmpeg=0.7.4

FFmpeg FFmpeg=0.7.5

FFmpeg FFmpeg=0.7.6

FFmpeg FFmpeg=0.7.7

FFmpeg FFmpeg=0.7.8

FFmpeg FFmpeg=0.7.9

FFmpeg FFmpeg=0.7.11

FFmpeg FFmpeg=0.7.12

FFmpeg FFmpeg=0.8.0

FFmpeg FFmpeg=0.8.1

FFmpeg FFmpeg=0.8.2

FFmpeg FFmpeg=0.8.5

FFmpeg FFmpeg=0.8.5.3

FFmpeg FFmpeg=0.8.5.4

FFmpeg FFmpeg=0.8.6

FFmpeg FFmpeg=0.8.7

FFmpeg FFmpeg=0.8.8

FFmpeg FFmpeg=0.8.10

FFmpeg FFmpeg=0.8.11

FFmpeg FFmpeg=0.9

FFmpeg FFmpeg=0.9.1

FFmpeg FFmpeg=0.10

FFmpeg FFmpeg=0.10.3

Event History

Sep 10, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2802?

The severity of CVE-2012-2802 is currently unspecified due to the unknown impact and attack vectors.

How do I fix CVE-2012-2802?

To fix CVE-2012-2802, you should upgrade to a patched version of FFmpeg or Libav beyond the vulnerable versions listed.

Which software versions are affected by CVE-2012-2802?