PT-2012-2967 · Libav · Libav

Fabian Yamaguchi + 1 · Published 2012-08-20 · Updated 2012-11-27 · CVE-2012-0947

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Libav versions 0.5.x through 0.5.8 Libav versions 0.6.x through 0.6.5 Libav versions 0.7.x through 0.7.5 Libav versions 0.8.x through 0.8.1

Description The issue is related to a heap-based buffer overflow in the vqa decode chunk function within the VQA codec of libavcodec. This can be triggered by remote attackers using a crafted VQA media file where the image size is not a multiple of the block size, potentially leading to a denial of service or arbitrary code execution.

Recommendations For Libav versions 0.5.x through 0.5.8, update to version 0.5.9 or later. For Libav versions 0.6.x through 0.6.5, update to version 0.6.6 or later. For Libav versions 0.7.x through 0.7.5, update to version 0.7.6 or later. For Libav versions 0.8.x through 0.8.1, update to version 0.8.2 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0947

DSA-2471-1

Affected Products

Libav

References · 12

• 🔥 https://bugs.launchpad.net/ubuntu/+source/libav/+bug/980963 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2012-0947 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0947 · Vendor Advisory
• http://debian.org/security/2012/dsa-2471 · Vendor Advisory
• http://ubuntu.com/usn/USN-1479-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-0947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0947 · Security Note
• http://secunia.com/advisories/49089 · Note
• http://openwall.com/lists/oss-security/2012/05/03/4 · Note
• http://securityfocus.com/bid/53389 · Note
• http://libav.org · Note
• http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3 · Note