CVE-2012-2782

Published: 10 September 2012

Unspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a "rejected resolution change."

Notes

ffmpeg-extra in multiverse needs to have matching version
libav-extra is built with tarball produced by libav package
as of 2013-04-02, not in libav codebase
upstream libav doesn't consider this to be an issue.

Status

References

• http://www.openwall.com/lists/oss-security/2012/09/02/4
• http://www.openwall.com/lists/oss-security/2012/08/31/3
• http://secunia.com/advisories/50468
• http://ffmpeg.org/security.html
• https://www.cve.org/CVERecord?id=CVE-2012-2782
• NVD
• Launchpad
• Debian