← Back

CVE-2012-5144

nvd nist
Published: Dec 12, 2012Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."

Affected (88)

Products: Canonical: Ubuntu Linux · Libav: Libav · Google: Chrome · +1 more
Show all products
1 product
Ubuntu Linux
1 product
Libav
1 product
Chrome
1 product
Opensuse
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 11.10
Version 12.04
Version 12.10
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Libav
Version 0.8.1
Version 0.8.2
Version 0.8.3
Version 0.8.4
Version 0.8
Version 0.8 beta2
Configuration C
68 vulnerable
Vulnerable SoftwareAffected Versions
Google
Up to 23.0.1271.96
Version 23.0.1271.0
Version 23.0.1271.10
Version 23.0.1271.11
Version 23.0.1271.12
Version 23.0.1271.13
Version 23.0.1271.14
Version 23.0.1271.15
Version 23.0.1271.16
Version 23.0.1271.17
Version 23.0.1271.18
Version 23.0.1271.19
Version 23.0.1271.1
Version 23.0.1271.20
Version 23.0.1271.21
Version 23.0.1271.22
Version 23.0.1271.23
Version 23.0.1271.24
Version 23.0.1271.26
Version 23.0.1271.2
Version 23.0.1271.30
Version 23.0.1271.31
Version 23.0.1271.32
Version 23.0.1271.33
Version 23.0.1271.35
Version 23.0.1271.36
Version 23.0.1271.37
Version 23.0.1271.38
Version 23.0.1271.39
Version 23.0.1271.3
Version 23.0.1271.40
Version 23.0.1271.41
Version 23.0.1271.44
Version 23.0.1271.45
Version 23.0.1271.46
Version 23.0.1271.49
Version 23.0.1271.4
Version 23.0.1271.50
Version 23.0.1271.51
Version 23.0.1271.52
Version 23.0.1271.53
Version 23.0.1271.54
Version 23.0.1271.55
Version 23.0.1271.56
Version 23.0.1271.57
Version 23.0.1271.58
Version 23.0.1271.59
Version 23.0.1271.5
Version 23.0.1271.60
Version 23.0.1271.61
Version 23.0.1271.62
Version 23.0.1271.64
Version 23.0.1271.6
Version 23.0.1271.7
Version 23.0.1271.83
Version 23.0.1271.84
Version 23.0.1271.85
Version 23.0.1271.86
Version 23.0.1271.87
Version 23.0.1271.88
Version 23.0.1271.89
Version 23.0.1271.8
Version 23.0.1271.91
Version 23.0.1271.92
Version 23.0.1271.93
Version 23.0.1271.94
Version 23.0.1271.95
Version 23.0.1271.9
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Version 12.1
Version 12.2
Configuration E
9 vulnerable
Vulnerable SoftwareAffected Versions
Libav
Version 0.7.1
Version 0.7.2
Version 0.7.3
Version 0.7.4
Version 0.7.5
Version 0.7.6
Version 0.7
Version 0.7 beta1
Version 0.7 beta2

References (14)

Timeline

No history available yet.