Buffer overflow in Ffmpeg

CVE-2012-0847

Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.

Vulnerability class: Buffer Overflow

EPSS: 0.015 (71.7th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.7.1, 0.7.2, 0.7.7
  • N/a — versions n/a

Weakness classification (CWE)

References