CVE-2012-6618
low
CVSS v3
—
CVSS v2
2.6
VIR risk
2.6
Description
The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2012-6618
Vendor advisory: cve@mitre.org — http://secunia.com/advisories/51964
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | fixed | 7:2.4.1-1 |
| debian | bullseye | fixed | 7:2.4.1-1 |
| debian | forky | fixed | 7:2.4.1-1 |
| debian | sid | fixed | 7:2.4.1-1 |
| debian | trixie | fixed | 7:2.4.1-1 |
References
- http://article.gmane.org/gmane.comp.video.ffmpeg.user/42233
- http://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v9.11
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=e74cd2f4706f71da5e9205003c1d8263b54ed3fb
- http://secunia.com/advisories/51964
- http://www.ffmpeg.org/security.html
- https://trac.ffmpeg.org/ticket/1991
- https://security-tracker.debian.org/tracker/CVE-2012-6618
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.