FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-0851

This CVE name corresponds to:

Entered	Topic
2013-08-20	gstreamer-ffmpeg -- Multiple vulnerabilities in bundled libav

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-0851 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2012-0851
Phase	Assigned(20120119)

Description

The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted H.264 file, related to the chroma_format_idc value.

References

Source	Reference
MLIST	[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1
CONFIRM	http://ffmpeg.org/trac/ffmpeg/ticket/758
CONFIRM	http://git.videolan.org/?p=ffmpeg.git;a=commit;h=7fff64e00d886fde11d61958888c82b461cf99b9
CONFIRM	http://libav.org/
CONFIRM	http://ffmpeg.org/security.html
DEBIAN	DSA-2494
MANDRIVA	MDVSA-2013:079
UBUNTU	USN-1479-1
XF	ffmpeg-ffh264decode-code-exec(78933)