CVE-2012-2803
Gentoo Linux Security Advisory 201406-28
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value.
Una vulnerabilidad de doble liberación en la función mpeg_decode_frame de libavcodec/mpeg12.c en FFmpeg antes de v0.11 tiene un impacto y vectores de ataque desconocidos. Se trata de un problema relacionado con el cambio del valor del tamaño de los datos
It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-05-19 CVE Reserved
- 2012-09-10 CVE Published
- 2024-08-06 CVE Updated
- 2025-05-15 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://ffmpeg.org/security.html | X_refsource_confirm | |
| http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=951cbea56fdc03ef96d07fbd7e5bed755d42ac8a | X_refsource_confirm | |
| http://libav.org/releases/libav-0.7.7.changelog | X_refsource_confirm | |
| http://libav.org/releases/libav-0.8.5.changelog | X_refsource_confirm | |
| http://secunia.com/advisories/50468 | Third Party Advisory | |
| http://www.openwall.com/lists/oss-security/2012/08/31/3 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2012/09/02/4 | Mailing List |
|
| http://www.securityfocus.com/bid/55355 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.ubuntu.com/usn/USN-1705-1 | 2023-11-07 | |
| http://www.ubuntu.com/usn/USN-1706-1 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8 Search vendor "Libav" for product "Libav" and version "0.8" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8 Search vendor "Libav" for product "Libav" and version "0.8" | beta2 |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.1 Search vendor "Libav" for product "Libav" and version "0.8.1" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.2 Search vendor "Libav" for product "Libav" and version "0.8.2" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.3 Search vendor "Libav" for product "Libav" and version "0.8.3" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.4 Search vendor "Libav" for product "Libav" and version "0.8.4" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | <= 0.10.4 Search vendor "Ffmpeg" for product "Ffmpeg" and version " <= 0.10.4" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.3" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.3.1 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.3.1" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.3.2 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.3.2" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.3.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.3.3" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.3.4 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.3.4" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.0 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.0" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.2 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.2" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.3" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.4 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.4" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.5 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.5" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.6 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.6" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.7 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.7" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.8 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.8" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.9 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.9" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.4.9 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.4.9" | pre1 |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.5 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.5.1 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.1" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.5.2 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.2" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.5.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.3" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.5.4 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.4" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.5.4.5 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.4.5" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.5.4.6 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.5.4.6" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.6 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.6" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.6.1 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.6.1" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.6.2 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.6.2" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.6.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.6.3" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.1 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.1" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.2 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.2" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.3" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.4 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.4" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.5 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.5" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.6 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.6" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.7 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.7" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.8 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.8" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.9 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.9" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.11 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.11" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.7.12 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.7.12" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.0 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.0" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.1 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.1" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.2 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.2" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.5 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.5" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.5.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.5.3" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.5.4 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.5.4" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.6 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.6" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.7 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.7" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.8 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.8" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.10 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.10" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.8.11 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.8.11" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.9 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.9" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.9.1 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.9.1" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.10 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.10" | - |
Affected
| ||||||
| Ffmpeg Search vendor "Ffmpeg" | Ffmpeg Search vendor "Ffmpeg" for product "Ffmpeg" | 0.10.3 Search vendor "Ffmpeg" for product "Ffmpeg" and version "0.10.3" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7 Search vendor "Libav" for product "Libav" and version "0.7" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7 Search vendor "Libav" for product "Libav" and version "0.7" | beta1 |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7 Search vendor "Libav" for product "Libav" and version "0.7" | beta2 |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.1 Search vendor "Libav" for product "Libav" and version "0.7.1" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.2 Search vendor "Libav" for product "Libav" and version "0.7.2" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.3 Search vendor "Libav" for product "Libav" and version "0.7.3" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.4 Search vendor "Libav" for product "Libav" and version "0.7.4" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.5 Search vendor "Libav" for product "Libav" and version "0.7.5" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.6 Search vendor "Libav" for product "Libav" and version "0.7.6" | - |
Affected
| ||||||