VDB
CVE-2012-0852
CVE-2012-0852
PUBLISHED
CVSS 6.800000190734863 MEDIUM
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
EPSS 2.74% · 84.7th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
2.74%
84.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ffmpeg | ffmpeg | 0.8.6, 0.7.8, 0.8.11 |
| libav | libav | 0.7.4, 0.7.5, 0.8 |
| n/a | n/a | n/a |
Timeline
- Aug 20, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- [oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1 mailing-list
- USN-1479-1 vendor-advisory
- http://ffmpeg.org/security.html technical
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=608708009f69ba4cecebf05120c696167494c897 technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78932 technical
- https://ffmpeg.org/trac/ffmpeg/ticket/794 advisory
- http://libav.org/ advisory
- https://nvd.nist.gov/vuln/detail/CVE-2012-0852 advisory
- http://git.videolan.org/?p=ffmpeg.git;a=commit;h=608708009f69ba4cecebf05120c696167494c897 url
- http://libav.org url
- http://www.debian.org/security/2012/dsa-2494 url