CVE-2012-2777 | Vulnerability Database | Aqua Security

Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to width/height changing in CAVS, a different vulnerability than CVE-2012-2784.

Affected Software

Name	Vendor	Start Version	End Version
Libav	Libav	0.8 (including)	0.8 (including)
Libav	Libav	0.8-beta2 (including)	0.8-beta2 (including)
Libav	Libav	0.8.1 (including)	0.8.1 (including)
Libav	Libav	0.8.2 (including)	0.8.2 (including)
Libav	Libav	0.8.3 (including)	0.8.3 (including)
Ffmpeg	Ubuntu	hardy	*
Ffmpeg	Ubuntu	lucid	*
Ffmpeg-extra	Ubuntu	lucid	*
Libav	Ubuntu	natty	*
Libav	Ubuntu	oneiric	*
Libav	Ubuntu	precise	*
Libav	Ubuntu	quantal	*
Libav-extra	Ubuntu	natty	*
Libav-extra	Ubuntu	oneiric	*
Libav-extra	Ubuntu	precise	*
Libav-extra	Ubuntu	quantal	*

References

http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=25715064c2ef4978672a91f8c856f3e8809a7c45
http://libav.org/releases/libav-0.7.7.changelog
http://libav.org/releases/libav-0.8.4.changelog
http://secunia.com/advisories/50468
http://secunia.com/advisories/51257
http://www.mandriva.com/security/advisories?name=MDVSA-2013:079
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://www.securityfocus.com/bid/55355

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-2777
CWE	https://cwe.mitre.org/data/definitions/.html