CVE Daily

CVE-2012-6618

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2...

Low CVSS 2.6

Overview

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."

CWE: CWE-119 Published: 2013-12-24T20:55:04.687
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 2.6 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags