2017-10-16 12:31:07 -04:00
{
2019-03-18 02:15:30 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org" ,
"ID" : "CVE-2012-6618" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
]
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
2017-10-16 12:31:07 -04:00
{
2019-03-18 02:15:30 +00:00
"lang" : "eng" ,
"value" : "The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient \"frames to estimate rate.\""
2017-10-16 12:31:07 -04:00
}
2019-03-18 02:15:30 +00:00
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "[ffmpeg-user] 20121204 Re: Unable to analyze/transcode mp3" ,
"refsource" : "MLIST" ,
"url" : "http://article.gmane.org/gmane.comp.video.ffmpeg.user/42233"
} ,
{
"name" : "https://trac.ffmpeg.org/ticket/1991" ,
"refsource" : "CONFIRM" ,
"url" : "https://trac.ffmpeg.org/ticket/1991"
} ,
{
"name" : "http://www.ffmpeg.org/security.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.ffmpeg.org/security.html"
} ,
{
"name" : "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=e74cd2f4706f71da5e9205003c1d8263b54ed3fb" ,
"refsource" : "CONFIRM" ,
"url" : "http://git.videolan.org/?p=ffmpeg.git;a=commit;h=e74cd2f4706f71da5e9205003c1d8263b54ed3fb"
} ,
{
"name" : "http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v9.11" ,
"refsource" : "CONFIRM" ,
"url" : "http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v9.11"
} ,
{
"name" : "51964" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/51964"
}
]
}
}