CVE-2012-6615

FFmpeg < 1.0.2 - Denial of Service via Subtitle Dialog Without Text

Title source: llm
STIX 2.1

Description

The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a subtitle dialog without text.

References (5)

Core 5
Core References
Various Sources x_refsource_confirm
http://www.ffmpeg.org/security.html
Various Sources x_refsource_confirm
https://trac.ffmpeg.org/ticket/2048
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/89592
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51964

Scores

EPSS 0.0083
EPSS Percentile 74.8%

Details

Status published
Products (2)
ffmpeg/ffmpeg 1.0
ffmpeg/ffmpeg < 1.0.1
Published Dec 24, 2013
Tracked Since Feb 18, 2026