What is CVE-2012-2772?

CVE-2012-2772 is a vulnerability in Ffmpeg. Published 2012-09-10.

Is CVE-2012-2772 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Ffmpeg

CVE-2012-2772

Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading."

EPSS: 0.029 (85.5th percentile) — read the EPSS interpretation.

Affected products

Ffmpeg — versions 0.3, 0.3.1, 0.3.2
Libav — versions 0.8, 0.8.1, 0.8.2
N/a — versions n/a

Public proof-of-concept exploits

lukeber4/usn-search

References

chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)
chrome-cve-admin@google.com (vendor-advisory, x_refsource_MANDRIVA)
chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)
chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)

Frequently asked questions

What is CVE-2012-2772?: CVE-2012-2772 is a vulnerability in Ffmpeg. Published 2012-09-10.
Is CVE-2012-2772 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.