CVE-2012-5359

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Feb 8, 2018
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-53608.8Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.CVE-2012-53617.8Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.CVE-2012-53627.5The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 NeighbCVE-2012-53637.5The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of serviceCVE-2012-53647.5The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 RouterCVE-2012-53657.5The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of serviceCVE-2012-53667.5The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service viaCVE-2012-53676.0Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands vCVE-2012-53684.3phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-CVE-2012-53705.0JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent aCVE-2012-53715.0Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash cCVE-2012-53725.0Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependen
CVE-2012-5359: High severity, CVSS 8.8 | Vulnix