CVE-2012-2882: Input Validation
Published Sep 26, 2012
·Updated
FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue.
Affected Software
55 affected components
Google Chrome<=22.0.1229.78
Google Chrome=22.0.1229.0
Google Chrome=22.0.1229.1
Google Chrome=22.0.1229.2
Google Chrome=22.0.1229.3
Google Chrome=22.0.1229.4
Google Chrome=22.0.1229.6
Google Chrome=22.0.1229.7
Google Chrome=22.0.1229.8
Google Chrome=22.0.1229.9
Google Chrome=22.0.1229.10
Google Chrome=22.0.1229.11
Google Chrome=22.0.1229.12
Google Chrome=22.0.1229.14
Google Chrome=22.0.1229.16
Google Chrome=22.0.1229.17
Google Chrome=22.0.1229.18
Google Chrome=22.0.1229.20
Google Chrome=22.0.1229.21
Google Chrome=22.0.1229.22
Google Chrome=22.0.1229.23
Google Chrome=22.0.1229.24
Google Chrome=22.0.1229.25
Google Chrome=22.0.1229.26
Google Chrome=22.0.1229.27
Google Chrome=22.0.1229.28
Google Chrome=22.0.1229.29
Google Chrome=22.0.1229.31
Google Chrome=22.0.1229.32
Google Chrome=22.0.1229.33
Google Chrome=22.0.1229.35
Google Chrome=22.0.1229.36
Google Chrome=22.0.1229.37
Google Chrome=22.0.1229.39
Google Chrome=22.0.1229.48
Google Chrome=22.0.1229.49
Google Chrome=22.0.1229.50
Google Chrome=22.0.1229.51
Google Chrome=22.0.1229.52
Google Chrome=22.0.1229.53
Google Chrome=22.0.1229.54
Google Chrome=22.0.1229.55
Google Chrome=22.0.1229.56
Google Chrome=22.0.1229.57
Google Chrome=22.0.1229.58
Google Chrome=22.0.1229.59
Google Chrome=22.0.1229.60
Google Chrome=22.0.1229.62
Google Chrome=22.0.1229.63
Google Chrome=22.0.1229.64
Google Chrome=22.0.1229.65
Google Chrome=22.0.1229.67
Google Chrome=22.0.1229.76
openSUSE openSUSE=12.1
openSUSE openSUSE=12.2
Remediation
Patch Available
Patch Available
Event History
Sep 26, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2882?
CVE-2012-2882 has a high severity level as it allows remote attackers to potentially cause a denial of service.
2
How do I fix CVE-2012-2882?
To fix CVE-2012-2882, update to the latest version of Google Chrome that is above 22.0.1229.79.
3
What versions of Google Chrome are affected by CVE-2012-2882?
CVE-2012-2882 affects Google Chrome versions prior to 22.0.1229.79.
4
What type of vulnerability is CVE-2012-2882?
CVE-2012-2882 is a wild pointer vulnerability within the FFmpeg library used by Google Chrome for handling OGG containers.
5
Can CVE-2012-2882 lead to other impacts apart from denial of service?
Yes, CVE-2012-2882 may potentially lead to unspecified other impacts in addition to denial of service.