CVE-2012-6617

FFmpeg < 1.0.2 - Denial of Service via RTP Format in prepare_sdp_description

Title source: llm
STIX 2.1

Description

The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/93232
Various Sources x_refsource_confirm
https://trac.ffmpeg.org/ticket/1986
Various Sources x_refsource_confirm
http://www.ffmpeg.org/security.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51964

Scores

EPSS 0.0071
EPSS Percentile 72.4%

Details

Status published
Products (2)
ffmpeg/ffmpeg 1.0
ffmpeg/ffmpeg < 1.0.1
Published Dec 24, 2013
Tracked Since Feb 18, 2026