CVE-2012-2802 | Vulnerability Database | Aqua Security

Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the number of output channels and out of array writes.

Affected Software

Name	Vendor	Start Version	End Version
Libav	Libav	0.8 (including)	0.8 (including)
Libav	Libav	0.8-beta2 (including)	0.8-beta2 (including)
Libav	Libav	0.8.1 (including)	0.8.1 (including)
Libav	Libav	0.8.2 (including)	0.8.2 (including)
Libav	Libav	0.8.3 (including)	0.8.3 (including)
Ffmpeg	Ubuntu	hardy	*
Ffmpeg	Ubuntu	lucid	*
Ffmpeg	Ubuntu	upstream	*
Ffmpeg-extra	Ubuntu	lucid	*
Libav	Ubuntu	devel	*
Libav	Ubuntu	natty	*
Libav	Ubuntu	oneiric	*
Libav	Ubuntu	precise	*
Libav	Ubuntu	quantal	*
Libav	Ubuntu	raring	*
Libav	Ubuntu	saucy	*
Libav-extra	Ubuntu	devel	*
Libav-extra	Ubuntu	natty	*
Libav-extra	Ubuntu	oneiric	*
Libav-extra	Ubuntu	precise	*
Libav-extra	Ubuntu	quantal	*
Libav-extra	Ubuntu	raring	*
Libav-extra	Ubuntu	saucy	*

References

http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af
http://libav.org/releases/libav-0.8.4.changelog
http://libav.org/releases/libav-0.8.5.changelog
http://secunia.com/advisories/50468
http://secunia.com/advisories/51257
http://www.mandriva.com/security/advisories?name=MDVSA-2013:079
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://www.securityfocus.com/bid/55355
http://www.ubuntu.com/usn/USN-1705-1

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-2802
CWE	https://cwe.mitre.org/data/definitions/.html