10
CVSSv2

CVE-2012-2803

Published: 10/09/2012 Updated: 07/11/2023
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg prior to 0.11, and Libav 0.7.x prior to 0.7.7 and 0.8.x prior to 0.8.5, has unknown impact and attack vectors, related to resetting the data size value.

Vulnerable Product Search on Vulmon Subscribe to Product

libav libav 0.8

libav libav 0.8.1

libav libav 0.8.2

libav libav 0.8.3

libav libav 0.8.4

ffmpeg ffmpeg 0.7.7

ffmpeg ffmpeg 0.7.1

ffmpeg ffmpeg 0.7.6

ffmpeg ffmpeg 0.4.5

ffmpeg ffmpeg 0.10.3

ffmpeg ffmpeg 0.3.2

ffmpeg ffmpeg 0.8.6

ffmpeg ffmpeg 0.4.7

ffmpeg ffmpeg 0.6.1

ffmpeg ffmpeg 0.3.3

ffmpeg ffmpeg 0.7.5

ffmpeg ffmpeg 0.5.4.6

ffmpeg ffmpeg 0.3

ffmpeg ffmpeg 0.4.2

ffmpeg ffmpeg 0.5

ffmpeg ffmpeg 0.5.4

ffmpeg ffmpeg 0.9.1

ffmpeg ffmpeg 0.8.5.4

ffmpeg ffmpeg 0.8.5.3

ffmpeg ffmpeg 0.5.1

ffmpeg ffmpeg 0.8.5

ffmpeg ffmpeg 0.9

ffmpeg ffmpeg 0.3.1

ffmpeg ffmpeg 0.7.3

ffmpeg ffmpeg 0.4.9

ffmpeg ffmpeg 0.7.4

ffmpeg ffmpeg 0.8.0

ffmpeg ffmpeg 0.6

ffmpeg ffmpeg 0.5.3

ffmpeg ffmpeg 0.8.10

ffmpeg ffmpeg 0.4.4

ffmpeg ffmpeg 0.5.2

ffmpeg ffmpeg

ffmpeg ffmpeg 0.4.6

ffmpeg ffmpeg 0.3.4

ffmpeg ffmpeg 0.7.8

ffmpeg ffmpeg 0.4.0

ffmpeg ffmpeg 0.6.2

ffmpeg ffmpeg 0.8.7

ffmpeg ffmpeg 0.7.9

ffmpeg ffmpeg 0.5.4.5

ffmpeg ffmpeg 0.7

ffmpeg ffmpeg 0.7.12

ffmpeg ffmpeg 0.8.1

ffmpeg ffmpeg 0.4.8

ffmpeg ffmpeg 0.4.3

ffmpeg ffmpeg 0.6.3

ffmpeg ffmpeg 0.8.11

ffmpeg ffmpeg 0.10

ffmpeg ffmpeg 0.8.8

ffmpeg ffmpeg 0.8.2

ffmpeg ffmpeg 0.7.11

ffmpeg ffmpeg 0.7.2

libav libav 0.7

libav libav 0.7.4

libav libav 0.7.1

libav libav 0.7.2

libav libav 0.7.5

libav libav 0.7.3

libav libav 0.7.6

Vendor Advisories

Libav could be made to crash or run programs as your login if it opened a specially crafted file ...
FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file ...
Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder Multiple input validations in the decoders/demuxers for Shorten, Chinese AVS video, VP5, VP6, AVI, AVS and MPEG-1/2 files could lead to the execution of arbitrary code Most of these issues were discovered by Mateusz Jurczyk and Gynvael Coldwind For th ...
Debian Bug report logs - #688847 libav: multiple CVEs in ffmpeg/libav Package: src:libav; Maintainer for src:libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Yves-Alexis Perez <corsac@debianorg> Date: Wed, 26 Sep 2012 08:27:01 UTC Severity: grave Tags: securit ...
Debian Bug report logs - #694483 CVEs: CVE-2012-2882 CVE-2012-5359 CVE-2012-5360 CVE-2012-5361 Package: src:libav; Maintainer for src:libav is Debian Multimedia Maintainers <pkg-multimedia-maintainers@listsaliothdebianorg>; Reported by: Arne Wichmann <aw@linuxde> Date: Mon, 26 Nov 2012 19:42:01 UTC Severity: grav ...
Debian Bug report logs - #688849 ffmpeg/squeeze/stable: multiple CVEs that need further investigation Package: src:ffmpeg; Maintainer for src:ffmpeg is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Yves-Alexis Perez <corsac@debianorg> Date: Wed, 26 Sep 2012 08:27:01 UTC Severity: g ...