CVE-2012-6617: Medium severity ffmpeg vulnerability
Published Dec 24, 2013
·Updated
The preparesdpdescription function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
Affected Software
2 affected components
FFmpeg FFmpeg<=1.0.1
FFmpeg FFmpeg=1.0
Remediation
Event History
Dec 24, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6617?
CVE-2012-6617 has a severity rating of medium as it allows remote attackers to cause a denial of service crash.
2
How do I fix CVE-2012-6617?
To fix CVE-2012-6617, upgrade FFmpeg to version 1.0.2 or later.
3
Which versions of FFmpeg are affected by CVE-2012-6617?
FFmpeg versions before 1.0.2, including version 1.0, are affected by CVE-2012-6617.
4
What component of FFmpeg is vulnerable in CVE-2012-6617?
The prepare_sdp_description function in ffserver.c is the component vulnerable in CVE-2012-6617.
5
Can CVE-2012-6617 be exploited remotely?
Yes, CVE-2012-6617 can be exploited remotely by attackers using specific vectors related to the rtp format.