CVEvulnerability
CVE-2012-5144
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
Affected configurations
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
• libav libav 0.8
• libav libav 0.8.1
• libav libav 0.8.2
• libav libav 0.8.3
• libav libav 0.8.4
• google chrome (<= 23.0.1271.96)
• google chrome 23.0.1271.0
• google chrome 23.0.1271.1
• google chrome 23.0.1271.2
• google chrome 23.0.1271.3
• google chrome 23.0.1271.4
• google chrome 23.0.1271.5
• google chrome 23.0.1271.6
• google chrome 23.0.1271.7
• google chrome 23.0.1271.8
• google chrome 23.0.1271.9
• google chrome 23.0.1271.10
• google chrome 23.0.1271.11
• google chrome 23.0.1271.12
• google chrome 23.0.1271.13
• google chrome 23.0.1271.14
• google chrome 23.0.1271.15
• google chrome 23.0.1271.16
• google chrome 23.0.1271.17
• google chrome 23.0.1271.18
• google chrome 23.0.1271.19
• google chrome 23.0.1271.20
• google chrome 23.0.1271.21
• google chrome 23.0.1271.22
• google chrome 23.0.1271.23
• google chrome 23.0.1271.24
• google chrome 23.0.1271.26
• google chrome 23.0.1271.30
• google chrome 23.0.1271.31
• google chrome 23.0.1271.32
• google chrome 23.0.1271.33
• google chrome 23.0.1271.35
• google chrome 23.0.1271.36
• google chrome 23.0.1271.37
• google chrome 23.0.1271.38
• google chrome 23.0.1271.39
• google chrome 23.0.1271.40
• google chrome 23.0.1271.41
• google chrome 23.0.1271.44
• google chrome 23.0.1271.45
• google chrome 23.0.1271.46
• google chrome 23.0.1271.49
• google chrome 23.0.1271.50
• google chrome 23.0.1271.51
• google chrome 23.0.1271.52
• google chrome 23.0.1271.53
• google chrome 23.0.1271.54
• google chrome 23.0.1271.55
• google chrome 23.0.1271.56
• google chrome 23.0.1271.57
• google chrome 23.0.1271.58
• google chrome 23.0.1271.59
… and 25 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html googlechromereleases.blogspot.com
- http://libav.org/releases/libav-0.7.7.changelog libav.org
- http://libav.org/releases/libav-0.8.5.changelog libav.org
- http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html lists.opensuse.org
- http://www.ubuntu.com/usn/USN-1705-1 www.ubuntu.com
- https://code.google.com/p/chromium/issues/detail?id=161639 code.google.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16007 oval.cisecurity.org
- http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html googlechromereleases.blogspot.com
- http://libav.org/releases/libav-0.7.7.changelog libav.org
- http://libav.org/releases/libav-0.8.5.changelog libav.org
- http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html lists.opensuse.org
- http://www.ubuntu.com/usn/USN-1705-1 www.ubuntu.com
- https://code.google.com/p/chromium/issues/detail?id=161639 code.google.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16007 oval.cisecurity.org