| Vulnerability Name: | CVE-2012-0947 (CCN-75436) |
| Assigned: | 2012-04-12 |
| Published: | 2012-04-12 |
| Updated: | 2012-11-27 |
| Summary: | Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.
|
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)| Exploitability Metrics: | Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None | | Scope: | Scope (S): Unchanged
| | Impact Metrics: | Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low |
|
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)| Exploitability Metrics: | Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None | | Impact Metrics: | Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial |
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)| Exploitability Metrics: | Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
| | Impact Metrics: | Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial |
|
| Vulnerability Type: | CWE-119
|
| Vulnerability Consequences: | File Manipulation |
| References: | Source: MITRE
Type: CNA
CVE-2012-0947
Source: CCN
Type: FFmpeg Web site
April 12, 2012, FFmpeg 0.7.12 / 0.8.11
Source: CONFIRM
Type: Patch
http://git.libav.org/?p=libav.git;a=commit;h=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3
Source: CONFIRM
Type: UNKNOWN
http://libav.org/
Source: CCN
Type: SA48770
FFmpeg Multiple Vulnerabilities
Source: SECUNIA
Type: UNKNOWN
49089
Source: DEBIAN
Type: UNKNOWN
DSA-2471
Source: DEBIAN
Type: DSA-2471
ffmpeg -- several vulnerabilities
Source: MLIST
Type: UNKNOWN
[oss-security] 20120503 Security issue in libav/ffmpeg
Source: CCN
Type: OSVDB ID: 82128
FFmpeg Unspecified Issue (2012-0947)
Source: BID
Type: UNKNOWN
53389
Source: CCN
Type: BID-53389
FFmpeg libavcodec 'vqavideo.c' '.vaq' File Heap Memory Corruption Vulnerability
Source: UBUNTU
Type: UNKNOWN
USN-1479-1
Source: MISC
Type: Exploit
https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963
Source: XF
Type: UNKNOWN
ffmpeg-vqa-bo(75436)
|
| Vulnerable Configuration: | Configuration 1:
cpe:/a:libav:libav:0.5:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.5.1:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.5.2:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.5.3:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.5.4:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.5.5:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.5.6:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.5.7:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.6:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.6.1:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.6.2:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.6.3:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.6.4:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.6.5:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7:beta1:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7:beta2:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7.1:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7.2:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7.3:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7.4:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.7.5:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.8:*:*:*:*:*:*:*OR cpe:/a:libav:libav:0.8:beta2:*:*:*:*:*:*OR cpe:/a:libav:libav:0.8.1:*:*:*:*:*:*:*
Configuration CCN 1:
cpe:/a:ffmpeg:ffmpeg:0.8.7:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.8.1:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.7.3:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.8.2:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.7.4:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.8.3:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.7.7:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.8.6:*:*:*:*:*:*:*OR cpe:/a:ffmpeg:ffmpeg:0.9:*:*:*:*:*:*:*
 Denotes that component is vulnerable |
| Oval Definitions |
|
| BACK |