CVE-2012-2802 | Vulnerability Database | Aqua Security

Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the number of output channels and out of array writes.

Affected Software

Name	Vendor	Start Version	End Version
Libav	Libav	0.8	0.8
Libav	Libav	0.8	0.8
Libav	Libav	0.8.1	0.8.1
Libav	Libav	0.8.2	0.8.2
Libav	Libav	0.8.3	0.8.3

References

http://ffmpeg.org/security.html
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2c22701c371c2f3dea21fcdbb97c981939fb77af
http://libav.org/releases/libav-0.8.4.changelog
http://libav.org/releases/libav-0.8.5.changelog
http://secunia.com/advisories/50468
http://secunia.com/advisories/51257
http://www.mandriva.com/security/advisories?name=MDVSA-2013:079
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://www.securityfocus.com/bid/55355
http://www.ubuntu.com/usn/USN-1705-1

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-2802
CWE	https://cwe.mitre.org/data/definitions/.html