FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-0852

This CVE name corresponds to:

Entered	Topic
2013-08-20	gstreamer-ffmpeg -- Multiple vulnerabilities in bundled libav

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-0852 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2012-0852
Phase	Assigned(20120119)

Description

The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.

References

Source	Reference
MLIST	[oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1
CONFIRM	http://git.videolan.org/?p=ffmpeg.git;a=commit;h=608708009f69ba4cecebf05120c696167494c897
CONFIRM	http://libav.org/
CONFIRM	https://ffmpeg.org/trac/ffmpeg/ticket/794
CONFIRM	http://ffmpeg.org/security.html
DEBIAN	DSA-2494
UBUNTU	USN-1479-1
XF	ffmpeg-adpcmdecodeframe-code-exec(78932)