Vulnerability in Ffmpeg

CVE-2012-2788

Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

Ffmpeg — versions 0.3, 0.3.1, 0.3.2
Libav — versions 0.8, 0.8.1, 0.8.2
N/a — versions n/a

References

chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)
chrome-cve-admin@google.com (vendor-advisory, x_refsource_MANDRIVA)
chrome-cve-admin@google.com (mailing-list, x_refsource_MLIST)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)
chrome-cve-admin@google.com (x_refsource_SECUNIA, third-party-advisory)