Buffer overflow in Ffmpeg
CVE-2012-2774
The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP state."
Vulnerability class: Buffer Overflow
EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.
Affected products
- Ffmpeg — versions 0.3, 0.3.1, 0.3.2
- N/a — versions n/a
Weakness classification (CWE)
References
- chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)
- chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)