CVE-2012-2798 | Vulnerability Database | Aqua Security

Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an out of array write.

Affected Software

Name	Vendor	Start Version	End Version
Libav	Libav	0.8 (including)	0.8 (including)
Libav	Libav	0.8-beta2 (including)	0.8-beta2 (including)
Libav	Libav	0.8.1 (including)	0.8.1 (including)
Libav	Libav	0.8.2 (including)	0.8.2 (including)
Libav	Libav	0.8.3 (including)	0.8.3 (including)
Ffmpeg	Ubuntu	hardy	*
Ffmpeg	Ubuntu	upstream	*
Libav	Ubuntu	natty	*
Libav	Ubuntu	oneiric	*
Libav	Ubuntu	precise	*
Libav	Ubuntu	quantal	*
Libav-extra	Ubuntu	natty	*
Libav-extra	Ubuntu	oneiric	*
Libav-extra	Ubuntu	precise	*
Libav-extra	Ubuntu	quantal	*

References

http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=72b9537d8886f679494651df517dfed9b420cf1f
http://libav.org/releases/libav-0.7.7.changelog
http://libav.org/releases/libav-0.8.4.changelog
http://libav.org/releases/libav-0.8.5.changelog
http://secunia.com/advisories/50468
http://secunia.com/advisories/51257
http://www.mandriva.com/security/advisories?name=MDVSA-2013:079
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://www.securityfocus.com/bid/55355
http://www.ubuntu.com/usn/USN-1705-1

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-2798
CWE	https://cwe.mitre.org/data/definitions/.html