CVE-2012-5144
Gentoo Linux Security Advisory 201406-28
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
Google Chrome antes 23.0.1271.97 no realiza correctamente la decodificación AAC, que permite a atacantes remotos provocar una denegación de servicio (corrupción de pila de memoria) o posiblemente tener un impacto no especificado a través de vectores desconocidos.
Multiple vulnerabilities have been found in Libav, allowing attackers to execute arbitrary code or cause Denial of Service. Versions less than 0.8.7 are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-09-24 CVE Reserved
- 2012-12-12 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html | X_refsource_confirm | |
| http://libav.org/releases/libav-0.7.7.changelog | X_refsource_confirm | |
| http://libav.org/releases/libav-0.8.5.changelog | X_refsource_confirm | |
| https://code.google.com/p/chromium/issues/detail?id=161639 | X_refsource_confirm | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16007 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html | 2023-11-07 | |
| http://www.ubuntu.com/usn/USN-1705-1 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 11.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "11.10" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 12.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "12.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 12.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "12.10" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8 Search vendor "Libav" for product "Libav" and version "0.8" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8 Search vendor "Libav" for product "Libav" and version "0.8" | beta2 |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.1 Search vendor "Libav" for product "Libav" and version "0.8.1" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.2 Search vendor "Libav" for product "Libav" and version "0.8.2" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.3 Search vendor "Libav" for product "Libav" and version "0.8.3" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.8.4 Search vendor "Libav" for product "Libav" and version "0.8.4" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | <= 23.0.1271.96 Search vendor "Google" for product "Chrome" and version " <= 23.0.1271.96" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.0 Search vendor "Google" for product "Chrome" and version "23.0.1271.0" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.1 Search vendor "Google" for product "Chrome" and version "23.0.1271.1" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.2 Search vendor "Google" for product "Chrome" and version "23.0.1271.2" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.3 Search vendor "Google" for product "Chrome" and version "23.0.1271.3" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.4 Search vendor "Google" for product "Chrome" and version "23.0.1271.4" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.5 Search vendor "Google" for product "Chrome" and version "23.0.1271.5" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.6 Search vendor "Google" for product "Chrome" and version "23.0.1271.6" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.7 Search vendor "Google" for product "Chrome" and version "23.0.1271.7" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.8 Search vendor "Google" for product "Chrome" and version "23.0.1271.8" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.9 Search vendor "Google" for product "Chrome" and version "23.0.1271.9" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.10 Search vendor "Google" for product "Chrome" and version "23.0.1271.10" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.11 Search vendor "Google" for product "Chrome" and version "23.0.1271.11" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.12 Search vendor "Google" for product "Chrome" and version "23.0.1271.12" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.13 Search vendor "Google" for product "Chrome" and version "23.0.1271.13" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.14 Search vendor "Google" for product "Chrome" and version "23.0.1271.14" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.15 Search vendor "Google" for product "Chrome" and version "23.0.1271.15" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.16 Search vendor "Google" for product "Chrome" and version "23.0.1271.16" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.17 Search vendor "Google" for product "Chrome" and version "23.0.1271.17" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.18 Search vendor "Google" for product "Chrome" and version "23.0.1271.18" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.19 Search vendor "Google" for product "Chrome" and version "23.0.1271.19" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.20 Search vendor "Google" for product "Chrome" and version "23.0.1271.20" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.21 Search vendor "Google" for product "Chrome" and version "23.0.1271.21" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.22 Search vendor "Google" for product "Chrome" and version "23.0.1271.22" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.23 Search vendor "Google" for product "Chrome" and version "23.0.1271.23" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.24 Search vendor "Google" for product "Chrome" and version "23.0.1271.24" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.26 Search vendor "Google" for product "Chrome" and version "23.0.1271.26" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.30 Search vendor "Google" for product "Chrome" and version "23.0.1271.30" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.31 Search vendor "Google" for product "Chrome" and version "23.0.1271.31" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.32 Search vendor "Google" for product "Chrome" and version "23.0.1271.32" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.33 Search vendor "Google" for product "Chrome" and version "23.0.1271.33" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.35 Search vendor "Google" for product "Chrome" and version "23.0.1271.35" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.36 Search vendor "Google" for product "Chrome" and version "23.0.1271.36" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.37 Search vendor "Google" for product "Chrome" and version "23.0.1271.37" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.38 Search vendor "Google" for product "Chrome" and version "23.0.1271.38" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.39 Search vendor "Google" for product "Chrome" and version "23.0.1271.39" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.40 Search vendor "Google" for product "Chrome" and version "23.0.1271.40" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.41 Search vendor "Google" for product "Chrome" and version "23.0.1271.41" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.44 Search vendor "Google" for product "Chrome" and version "23.0.1271.44" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.45 Search vendor "Google" for product "Chrome" and version "23.0.1271.45" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.46 Search vendor "Google" for product "Chrome" and version "23.0.1271.46" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.49 Search vendor "Google" for product "Chrome" and version "23.0.1271.49" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.50 Search vendor "Google" for product "Chrome" and version "23.0.1271.50" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.51 Search vendor "Google" for product "Chrome" and version "23.0.1271.51" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.52 Search vendor "Google" for product "Chrome" and version "23.0.1271.52" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.53 Search vendor "Google" for product "Chrome" and version "23.0.1271.53" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.54 Search vendor "Google" for product "Chrome" and version "23.0.1271.54" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.55 Search vendor "Google" for product "Chrome" and version "23.0.1271.55" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.56 Search vendor "Google" for product "Chrome" and version "23.0.1271.56" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.57 Search vendor "Google" for product "Chrome" and version "23.0.1271.57" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.58 Search vendor "Google" for product "Chrome" and version "23.0.1271.58" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.59 Search vendor "Google" for product "Chrome" and version "23.0.1271.59" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.60 Search vendor "Google" for product "Chrome" and version "23.0.1271.60" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.61 Search vendor "Google" for product "Chrome" and version "23.0.1271.61" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.62 Search vendor "Google" for product "Chrome" and version "23.0.1271.62" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.64 Search vendor "Google" for product "Chrome" and version "23.0.1271.64" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.83 Search vendor "Google" for product "Chrome" and version "23.0.1271.83" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.84 Search vendor "Google" for product "Chrome" and version "23.0.1271.84" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.85 Search vendor "Google" for product "Chrome" and version "23.0.1271.85" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.86 Search vendor "Google" for product "Chrome" and version "23.0.1271.86" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.87 Search vendor "Google" for product "Chrome" and version "23.0.1271.87" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.88 Search vendor "Google" for product "Chrome" and version "23.0.1271.88" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.89 Search vendor "Google" for product "Chrome" and version "23.0.1271.89" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.91 Search vendor "Google" for product "Chrome" and version "23.0.1271.91" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.92 Search vendor "Google" for product "Chrome" and version "23.0.1271.92" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.93 Search vendor "Google" for product "Chrome" and version "23.0.1271.93" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.94 Search vendor "Google" for product "Chrome" and version "23.0.1271.94" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 23.0.1271.95 Search vendor "Google" for product "Chrome" and version "23.0.1271.95" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 12.1 Search vendor "Opensuse" for product "Opensuse" and version "12.1" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 12.2 Search vendor "Opensuse" for product "Opensuse" and version "12.2" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7 Search vendor "Libav" for product "Libav" and version "0.7" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7 Search vendor "Libav" for product "Libav" and version "0.7" | beta1 |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7 Search vendor "Libav" for product "Libav" and version "0.7" | beta2 |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.1 Search vendor "Libav" for product "Libav" and version "0.7.1" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.2 Search vendor "Libav" for product "Libav" and version "0.7.2" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.3 Search vendor "Libav" for product "Libav" and version "0.7.3" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.4 Search vendor "Libav" for product "Libav" and version "0.7.4" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.5 Search vendor "Libav" for product "Libav" and version "0.7.5" | - |
Affected
| ||||||
| Libav Search vendor "Libav" | Libav Search vendor "Libav" for product "Libav" | 0.7.6 Search vendor "Libav" for product "Libav" and version "0.7.6" | - |
Affected
| ||||||