CVE-2012-5361

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Mar 20, 2017
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-53627.5The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 NeighbCVE-2012-53637.5The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of serviceCVE-2012-53647.5The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 RouterCVE-2012-53657.5The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of serviceCVE-2012-53667.5The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service viaCVE-2012-53676.0Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbitrary SQL commands vCVE-2012-53684.3phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows man-CVE-2012-53705.0JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent aCVE-2012-53715.0Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash cCVE-2012-53725.0Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependenCVE-2012-53735.0Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash colliCVE-2012-53744.0The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended
CVE-2012-5361: High severity, CVSS 7.8 | Vulnix