CVE-2012-0847

Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.

Score

CVSS 2.0 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2012-08-20

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Ffmpeg (Ffmpeg)

References

• http://ffmpeg.org/security.html
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=ae21776207e8a2bbe268e7c9e203f7599dd87ddb
• http://www.openwall.com/lists/oss-security/2012/02/01/11
• http://www.openwall.com/lists/oss-security/2012/02/14/4