Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-6618
HistoryDec 24, 2013 - 8:55 p.m.

CVE-2012-6618

2013-12-2420:55:04
Debian Security Bug Tracker
security-tracker.debian.org
9

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

EPSS

0.019

Percentile

88.8%

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient “frames to estimate rate.”

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

EPSS

0.019

Percentile

88.8%

Related for DEBIANCVE:CVE-2012-6618