CVE-2012-0852
- State
- Published
- Severity
- Not scored
- Published
- Aug 20, 2012
- Updated
- Aug 6, 2024
- Reserved
- Jan 19, 2012
Description
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-1479-1vendor-advisory
- [oss-security] 20120214 Re: CVE Requests for FFmpeg 0.9.1mailing-list
- https://ffmpeg.org/trac/ffmpeg/ticket/794
- DSA-2494vendor-advisory
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=608708009f69ba4cecebf05120c696167494c897
- http://libav.org/
- http://ffmpeg.org/security.html
- ffmpeg-adpcmdecodeframe-code-exec(78932)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.