CVE-2012-6618

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause…

published December 24, 2013

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01578 · 75.1th percentile
Published
2013-12-24T20:00Z
EPSS history
Timeline
  • 24 DEC 20:00Z
    The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause…
    cvelistv5