Denial of Service Vulnerability in FFmpeg's av_probe_input_buffer Function

CVE-2012-6618 · LOW Severity

AV:N/AC:H/AU:N/C:N/I:N/A:P

The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."

Learn more about our Web Application Penetration Testing UK.