CVE-2012-2783 — Vulnetix

CVE-2012-2783 PUBLISHED CVSS 10 CRITICAL

Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to "freeing the returned frame."

EPSS 1.43% · 81.1th percentile

Risk Scores

CVSS 2.0

EPSS Score

1.43%

81.1th percentile

Affected Products

Vendor	Product	Versions
libav	libav	0.7.6, 0.8, 0.8.1
n/a	n/a	n/a
ffmpeg	ffmpeg	0.5.1, 0.5.2, 0.5.3

Exploit Intelligence

http://ffmpeg.org/security.html (circl)
USN-1706-1 (circl)
[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11? (circl)
http://libav.org/releases/libav-0.8.5.changelog (circl)
55355 (circl)
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d85b3c4fff4c4b255232fcc01edbd57f19d60998 (circl)
[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11? (circl)
http://libav.org/releases/libav-0.7.7.changelog (circl)
USN-1705-1 (circl)
50468 (circl)

Timeline

Sep 10, 2012 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 20, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 9, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 2, 2023 EPSS Score
May 25, 2023 EPSS Score
Jul 17, 2023 EPSS Score

References

http://ffmpeg.org/security.html url
USN-1706-1 vendor-advisory
[oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11? mailing-list
http://libav.org/releases/libav-0.8.5.changelog url
55355 vdb
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d85b3c4fff4c4b255232fcc01edbd57f19d60998 url
[oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11? mailing-list
http://libav.org/releases/libav-0.7.7.changelog url
USN-1705-1 vendor-advisory
50468 third-party-advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-2783 advisory
http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d85b3c4fff4c4b255232fcc01edbd57f19d60998 url

Open in Interactive Console →