CVE-2012-2882

FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "wild pointer" issue.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
https://chromiumcodereview.appspot.com/10829204
https://code.google.com/p/chromium/issues/detail?id=140647
https://exchange.xforce.ibmcloud.com/vulnerabilities/78839
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15688
https://src.chromium.org/viewvc/chrome?view=rev&revision=150239
http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html
https://chromiumcodereview.appspot.com/10829204
https://code.google.com/p/chromium/issues/detail?id=140647
https://exchange.xforce.ibmcloud.com/vulnerabilities/78839
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15688
https://src.chromium.org/viewvc/chrome?view=rev&revision=150239

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:google:chrome::::::::
	cpe:2.3:a:google:chrome:22.0.1229.0:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.1:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.2:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.3:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.4:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.6:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.7:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.8:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.9:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.10:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.11:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.12:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.14:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.16:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.17:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.18:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.20:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.21:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.22:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.23:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.24:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.25:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.26:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.27:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.28:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.29:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.31:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.32:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.33:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.35:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.36:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.37:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.39:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.48:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.49:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.50:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.51:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.52:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.53:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.54:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.55:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.56:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.57:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.58:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.59:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.60:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.62:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.63:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.64:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.65:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.67:::::::*
	cpe:2.3:a:google:chrome:22.0.1229.76:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:opensuse:opensuse:12.1:::::::*
	cpe:2.3:o:opensuse:opensuse:12.2:::::::*

History

21 Nov 2024, 01:39

Type	Values Removed	Values Added
References	~~() http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html -~~	() http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html -
References	~~() http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html -
References	~~() https://chromiumcodereview.appspot.com/10829204 -~~	() https://chromiumcodereview.appspot.com/10829204 -
References	~~() https://code.google.com/p/chromium/issues/detail?id=140647 -~~	() https://code.google.com/p/chromium/issues/detail?id=140647 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/78839 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/78839 -
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15688 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15688 -
References	~~() https://src.chromium.org/viewvc/chrome?view=rev&revision=150239 -~~	() https://src.chromium.org/viewvc/chrome?view=rev&revision=150239 -

Information

Published : 2012-09-26 10:56

Updated : 2025-04-11 00:51

NVD link : CVE-2012-2882

Mitre link : CVE-2012-2882

CVE.ORG link : CVE-2012-2882

JSON object : View

Products Affected

opensuse

opensuse

google

chrome

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2012-2882", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-09-26T10:56:04.560", "references": [{"url": "http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html", "source": "chrome-cve-admin@google.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html", "source": "chrome-cve-admin@google.com"}, {"url": "https://chromiumcodereview.appspot.com/10829204", "source": "chrome-cve-admin@google.com"}, {"url": "https://code.google.com/p/chromium/issues/detail?id=140647", "source": "chrome-cve-admin@google.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78839", "source": "chrome-cve-admin@google.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15688", "source": "chrome-cve-admin@google.com"}, {"url": "https://src.chromium.org/viewvc/chrome?view=rev&revision=150239", "source": "chrome-cve-admin@google.com"}, {"url": "http://googlechromereleases.blogspot.com/2012/09/stable-channel-update_25.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00012.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://chromiumcodereview.appspot.com/10829204", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://code.google.com/p/chromium/issues/detail?id=140647", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78839", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15688", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://src.chromium.org/viewvc/chrome?view=rev&revision=150239", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a \"wild pointer\" issue."}, {"lang": "es", "value": "FFmpeg usado en Google Chrome anterior a v22.0.1229.79 no maneja adecuadamente los contenedores OGG, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio u otro tipo de impacto a trav\u00e9s de vectores desconocidos relativos al tema \"wild pointer\"."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A731193E-2EB0-4493-B030-E5D8B313CC4C", "versionEndIncluding": "22.0.1229.78"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFA38088-0F0C-4AD7-B6AE-90E0A296CBC3"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EBC81E3-5BFB-4A72-AE61-824925EA566E"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F6D1B7C-68B2-4E15-A299-64AB33AC44A2"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1E74AD2-3C44-45F3-898A-9BCEB5EA9A50"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E2ADE22-3ED1-4ADE-B6B3-FD2660A9B2B0"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91896DBD-3DE2-40FC-B1D1-46C78335BEB4"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B34C33DD-782F-4496-B8EB-6A4E03ACC435"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2219708F-86BE-4B08-9CE4-3AA4CC6366E3"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C777D40-B33D-424C-99C2-4BB255782ADA"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB90F606-71C4-484A-9748-CD91290FCFCE"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "137AE4FA-8BA2-45F1-A679-F78B40A87B19"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1592A3E6-0B43-4DE0-8578-89281762FF9F"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B74803BF-7531-45DC-9A75-0BF2B564D93D"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "751A2447-B844-4AC0-9078-E608B4931853"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64C12DD1-E746-47A0-A153-C1A483C85CDC"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "051D486A-D5B5-40C1-AAA0-9E4436BDA50D"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCF8DFBC-0C20-4A45-85BA-E78392D9E871"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58C802FC-ADB1-4FBA-8B43-D1CD5DCB213D"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5713F8A-53EF-4907-8F26-E02C91136A0E"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A56C21F-F2F5-4E53-98F8-9EBD52FBBF5A"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "717B88A5-567A-498E-B559-E2EF1D0D8868"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FCD61E9-F183-44B3-900F-663C7F69DDB3"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D268EF5-2147-4A76-9E82-BD1284F751A2"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9437B1F1-5D6D-49A8-9BA1-BC2299727961"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "405AC015-C815-4D53-9430-37643534234A"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4234CB96-56D8-4D5E-88E2-E9CC048BDC76"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAC7F56E-24F5-451A-AC82-FD1837B0B797"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2697F6EA-AECC-48E9-976F-A33EA43510DE"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EC008A4-B85F-43F9-AAE5-D55468280057"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A3198ED-BA23-4E6A-B043-07E75C262839"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "579EE812-100F-4E79-871D-583044D56102"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.37:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0B7E2C4-5A74-4E49-AC56-D718FC69B61C"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.39:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A14964C-F114-45AC-A30D-42E120E2AEF9"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.48:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3C2FBEC-17DE-4D09-8F2D-3642E90DA579"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.49:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E0DC0C5-6902-4A4A-A26C-B5F7DB7DE2DB"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C8518F5-67A2-478F-82F0-28202A73C594"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "537FBE4D-BCC4-4320-AEC6-8151842DC4DE"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0F5737D-56FA-49EB-8DA0-5EFA1405A03A"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.53:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0ABAA20-52A5-424D-A8DA-5333CFC5E417"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A042CA57-F72C-450D-B35F-2F057675C120"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD6155D0-D684-4598-A83B-FF2D1860D141"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.56:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3ADDB123-1157-4C87-8193-A1CF5BFE7C05"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.57:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2795BD2C-C512-4F00-8AD0-4781E665D515"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93A94863-EAD7-4B10-A674-0CFA9EA28618"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.59:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0D987B5-8F32-43FC-B753-87B2E29A2ECF"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7345E1B-B38F-4C7E-88B9-C905D919F291"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.62:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A591F092-4359-4F6E-BD07-C8554E72FA23"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.63:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A3D3FA2-C02E-4EA5-88C5-54311C126DC8"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.64:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DA9F5D3-AEBF-4E38-8C9B-C2503994CA16"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.65:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A848E89E-BEA9-49F9-A8D5-A19B0885E356"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.67:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84F974E8-8B1D-414B-85C4-21127917C4D9"}, {"criteria": "cpe:2.3:a:google:chrome:22.0.1229.76:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F0CF53F-0D12-4C7E-89CF-14EA6656F588"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"}, {"criteria": "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D806A17E-B8F9-466D-807D-3F1E77603DC8"}], "operator": "OR"}]}], "sourceIdentifier": "chrome-cve-admin@google.com"}

6.8 /10