Vulnerability Intelligence Report
CVE-2012-5144
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
No Active Exploit Signals
CVSS Base Score
10.0
HIGH
EPSS Probability:3.53%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| canonical | ubuntu_linux | 11.10, 12.04, 12.10 |
| libav | libav | 0.8, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.7, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6 |
| chrome | 23.0.1271.0, 23.0.1271.1, 23.0.1271.2, 23.0.1271.3, 23.0.1271.4, 23.0.1271.5, 23.0.1271.6, 23.0.1271.7, 23.0.1271.8, 23.0.1271.9, 23.0.1271.10, 23.0.1271.11, 23.0.1271.12, 23.0.1271.13, 23.0.1271.14, 23.0.1271.15, 23.0.1271.16, 23.0.1271.17, 23.0.1271.18, 23.0.1271.19, 23.0.1271.20, 23.0.1271.21, 23.0.1271.22, 23.0.1271.23, 23.0.1271.24, 23.0.1271.26, 23.0.1271.30, 23.0.1271.31, 23.0.1271.32, 23.0.1271.33, 23.0.1271.35, 23.0.1271.36, 23.0.1271.37, 23.0.1271.38, 23.0.1271.39, 23.0.1271.40, 23.0.1271.41, 23.0.1271.44, 23.0.1271.45, 23.0.1271.46, 23.0.1271.49, 23.0.1271.50, 23.0.1271.51, 23.0.1271.52, 23.0.1271.53, 23.0.1271.54, 23.0.1271.55, 23.0.1271.56, 23.0.1271.57, 23.0.1271.58, 23.0.1271.59, 23.0.1271.60, 23.0.1271.61, 23.0.1271.62, 23.0.1271.64, 23.0.1271.83, 23.0.1271.84, 23.0.1271.85, 23.0.1271.86, 23.0.1271.87, 23.0.1271.88, 23.0.1271.89, 23.0.1271.91, 23.0.1271.92, 23.0.1271.93, 23.0.1271.94, 23.0.1271.95 | |
| opensuse | opensuse | 12.1, 12.2 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.533%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Chrome · Vendor · USA |
| Reserved | 2012-09-24T00:00:00 |
| Published | 2012-12-12T11:00:00 |
| Patch Date | 2012-12-11 |
| Last Updated | 2024-08-06T20:58:02 |
Community Chatter & Buzz