CVE-2012-5144 [重大] | Memory Corruption（Ubuntu Linux）

Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."

#	日付	旧 EPSS スコア	新 EPSS スコア	Δ（新 − 旧）
1	2025-03-30	3.31%	3.50%	+0.20%
2	2025-03-29	3.50%	3.31%	-0.20%
3	2025-03-19	—	3.50%	—

日付

旧 EPSS スコア

新 EPSS スコア

Δ（新 − 旧）

2025-03-30

3.31%

3.50%

+0.20%

2025-03-29

3.50%

3.31%

-0.20%

2025-03-19

—

3.50%

—

ベーススコア	バージョン	深刻度	ベクトル	悪用しやすさ	影響	スコアの出典
10.0	2.0	HIGH	`AV:N/AC:L/Au:N/C:C/I:C/A:C` クリックして展開アクセス経路 (AV:N) ルーティング可能なネットワーク越しに、遠隔から到達・悪用しうる。アクセスの複雑さ (AC:L) 手順が短く、再現性が高い。認証 (AU:N) 認証を経ずに攻撃を完結できる。機密性への影響 (C:C) 機密性は全面的に損なわれる。完全性への影響 (I:C) 完全性は全面的に損なわれる。可用性への影響 (A:C) 可用性は全面的に損なわれる。	10.0	10.0	[email protected]

ベーススコア

バージョン

深刻度

ベクトル

悪用しやすさ

影響

スコアの出典

10.0

2.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C クリックして展開

アクセス経路 (AV:N): ルーティング可能なネットワーク越しに、遠隔から到達・悪用しうる。
アクセスの複雑さ (AC:L): 手順が短く、再現性が高い。
認証 (AU:N): 認証を経ずに攻撃を完結できる。
機密性への影響 (C:C): 機密性は全面的に損なわれる。
完全性への影響 (I:C): 完全性は全面的に損なわれる。
可用性への影響 (A:C): 可用性は全面的に損なわれる。

10.0

[email protected]

CVE-2012-5144 の OS トラッカー

vendor	priority	summary	link
`debian`	unimportant	CVE-2012-5144 unimportant priority: Debian including 1 source packages (ffmpeg), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2012-5144
`gentoo`	normal	CVE-2012-5144: 2 GLSA(s) (201309-16, 201406-28), 3 atom(s) (dev-lang/v8, media-video/libav, www-client/chromium); latest impact normal.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2012-5144
`ubuntu`	low	CVE-2012-5144 low priority: Ubuntu including 5 source packages (chromium-browser, ffmpeg, ffmpeg-extra, libav, libav-extra), 34 status rows across 7 suites (hardy, lucid, natty, oneiric, precise, quantal, upstream): DNE 14, released 13, ignored 3, needs-triage 2, not-affected 2.	https://ubuntu.com/security/CVE-2012-5144

CVE-2012-5144 の影響を受けるソフトウェア／構成

ベンダー	製品	バージョン	生の CPE
canonical	ubuntu_linux	11.10	cpe:2.3:o:canonical:ubuntu_linux:11.10:::::::*
canonical	ubuntu_linux	12.04	cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
canonical	ubuntu_linux	12.10	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*
libav	libav	0.8	cpe:2.3:a:libav:libav:0.8:::::::*
libav	libav	0.8	cpe:2.3:a:libav:libav:0.8:beta2::::::
libav	libav	0.8.1	cpe:2.3:a:libav:libav:0.8.1:::::::*
libav	libav	0.8.2	cpe:2.3:a:libav:libav:0.8.2:::::::*
libav	libav	0.8.3	cpe:2.3:a:libav:libav:0.8.3:::::::*
libav	libav	0.8.4	cpe:2.3:a:libav:libav:0.8.4:::::::*
google	chrome	<= 23.0.1271.96	cpe:2.3:a:google:chrome::::::::
google	chrome	23.0.1271.0	cpe:2.3:a:google:chrome:23.0.1271.0:::::::*
google	chrome	23.0.1271.1	cpe:2.3:a:google:chrome:23.0.1271.1:::::::*
google	chrome	23.0.1271.2	cpe:2.3:a:google:chrome:23.0.1271.2:::::::*
google	chrome	23.0.1271.3	cpe:2.3:a:google:chrome:23.0.1271.3:::::::*
google	chrome	23.0.1271.4	cpe:2.3:a:google:chrome:23.0.1271.4:::::::*
google	chrome	23.0.1271.5	cpe:2.3:a:google:chrome:23.0.1271.5:::::::*
google	chrome	23.0.1271.6	cpe:2.3:a:google:chrome:23.0.1271.6:::::::*
google	chrome	23.0.1271.7	cpe:2.3:a:google:chrome:23.0.1271.7:::::::*
google	chrome	23.0.1271.8	cpe:2.3:a:google:chrome:23.0.1271.8:::::::*
google	chrome	23.0.1271.9	cpe:2.3:a:google:chrome:23.0.1271.9:::::::*
google	chrome	23.0.1271.10	cpe:2.3:a:google:chrome:23.0.1271.10:::::::*
google	chrome	23.0.1271.11	cpe:2.3:a:google:chrome:23.0.1271.11:::::::*
google	chrome	23.0.1271.12	cpe:2.3:a:google:chrome:23.0.1271.12:::::::*
google	chrome	23.0.1271.13	cpe:2.3:a:google:chrome:23.0.1271.13:::::::*
google	chrome	23.0.1271.14	cpe:2.3:a:google:chrome:23.0.1271.14:::::::*
google	chrome	23.0.1271.15	cpe:2.3:a:google:chrome:23.0.1271.15:::::::*
google	chrome	23.0.1271.16	cpe:2.3:a:google:chrome:23.0.1271.16:::::::*
google	chrome	23.0.1271.17	cpe:2.3:a:google:chrome:23.0.1271.17:::::::*
google	chrome	23.0.1271.18	cpe:2.3:a:google:chrome:23.0.1271.18:::::::*
google	chrome	23.0.1271.19	cpe:2.3:a:google:chrome:23.0.1271.19:::::::*
google	chrome	23.0.1271.20	cpe:2.3:a:google:chrome:23.0.1271.20:::::::*
google	chrome	23.0.1271.21	cpe:2.3:a:google:chrome:23.0.1271.21:::::::*
google	chrome	23.0.1271.22	cpe:2.3:a:google:chrome:23.0.1271.22:::::::*
google	chrome	23.0.1271.23	cpe:2.3:a:google:chrome:23.0.1271.23:::::::*
google	chrome	23.0.1271.24	cpe:2.3:a:google:chrome:23.0.1271.24:::::::*
google	chrome	23.0.1271.26	cpe:2.3:a:google:chrome:23.0.1271.26:::::::*
google	chrome	23.0.1271.30	cpe:2.3:a:google:chrome:23.0.1271.30:::::::*
google	chrome	23.0.1271.31	cpe:2.3:a:google:chrome:23.0.1271.31:::::::*
google	chrome	23.0.1271.32	cpe:2.3:a:google:chrome:23.0.1271.32:::::::*
google	chrome	23.0.1271.33	cpe:2.3:a:google:chrome:23.0.1271.33:::::::*
google	chrome	23.0.1271.35	cpe:2.3:a:google:chrome:23.0.1271.35:::::::*
google	chrome	23.0.1271.36	cpe:2.3:a:google:chrome:23.0.1271.36:::::::*
google	chrome	23.0.1271.37	cpe:2.3:a:google:chrome:23.0.1271.37:::::::*
google	chrome	23.0.1271.38	cpe:2.3:a:google:chrome:23.0.1271.38:::::::*
google	chrome	23.0.1271.39	cpe:2.3:a:google:chrome:23.0.1271.39:::::::*
google	chrome	23.0.1271.40	cpe:2.3:a:google:chrome:23.0.1271.40:::::::*
google	chrome	23.0.1271.41	cpe:2.3:a:google:chrome:23.0.1271.41:::::::*
google	chrome	23.0.1271.44	cpe:2.3:a:google:chrome:23.0.1271.44:::::::*
google	chrome	23.0.1271.45	cpe:2.3:a:google:chrome:23.0.1271.45:::::::*
google	chrome	23.0.1271.46	cpe:2.3:a:google:chrome:23.0.1271.46:::::::*
google	chrome	23.0.1271.49	cpe:2.3:a:google:chrome:23.0.1271.49:::::::*
google	chrome	23.0.1271.50	cpe:2.3:a:google:chrome:23.0.1271.50:::::::*
google	chrome	23.0.1271.51	cpe:2.3:a:google:chrome:23.0.1271.51:::::::*
google	chrome	23.0.1271.52	cpe:2.3:a:google:chrome:23.0.1271.52:::::::*
google	chrome	23.0.1271.53	cpe:2.3:a:google:chrome:23.0.1271.53:::::::*
google	chrome	23.0.1271.54	cpe:2.3:a:google:chrome:23.0.1271.54:::::::*
google	chrome	23.0.1271.55	cpe:2.3:a:google:chrome:23.0.1271.55:::::::*
google	chrome	23.0.1271.56	cpe:2.3:a:google:chrome:23.0.1271.56:::::::*
google	chrome	23.0.1271.57	cpe:2.3:a:google:chrome:23.0.1271.57:::::::*
google	chrome	23.0.1271.58	cpe:2.3:a:google:chrome:23.0.1271.58:::::::*
google	chrome	23.0.1271.59	cpe:2.3:a:google:chrome:23.0.1271.59:::::::*
google	chrome	23.0.1271.60	cpe:2.3:a:google:chrome:23.0.1271.60:::::::*
google	chrome	23.0.1271.61	cpe:2.3:a:google:chrome:23.0.1271.61:::::::*
google	chrome	23.0.1271.62	cpe:2.3:a:google:chrome:23.0.1271.62:::::::*
google	chrome	23.0.1271.64	cpe:2.3:a:google:chrome:23.0.1271.64:::::::*
google	chrome	23.0.1271.83	cpe:2.3:a:google:chrome:23.0.1271.83:::::::*
google	chrome	23.0.1271.84	cpe:2.3:a:google:chrome:23.0.1271.84:::::::*
google	chrome	23.0.1271.85	cpe:2.3:a:google:chrome:23.0.1271.85:::::::*
google	chrome	23.0.1271.86	cpe:2.3:a:google:chrome:23.0.1271.86:::::::*
google	chrome	23.0.1271.87	cpe:2.3:a:google:chrome:23.0.1271.87:::::::*
google	chrome	23.0.1271.88	cpe:2.3:a:google:chrome:23.0.1271.88:::::::*
google	chrome	23.0.1271.89	cpe:2.3:a:google:chrome:23.0.1271.89:::::::*
google	chrome	23.0.1271.91	cpe:2.3:a:google:chrome:23.0.1271.91:::::::*
google	chrome	23.0.1271.92	cpe:2.3:a:google:chrome:23.0.1271.92:::::::*
google	chrome	23.0.1271.93	cpe:2.3:a:google:chrome:23.0.1271.93:::::::*
google	chrome	23.0.1271.94	cpe:2.3:a:google:chrome:23.0.1271.94:::::::*
google	chrome	23.0.1271.95	cpe:2.3:a:google:chrome:23.0.1271.95:::::::*
opensuse	opensuse	12.1	cpe:2.3:o:opensuse:opensuse:12.1:::::::*
opensuse	opensuse	12.2	cpe:2.3:o:opensuse:opensuse:12.2:::::::*
libav	libav	0.7	cpe:2.3:a:libav:libav:0.7:::::::*

CVE-2012-5144 の参考情報

URL	タグ
http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html
http://libav.org/releases/libav-0.7.7.changelog
http://libav.org/releases/libav-0.8.5.changelog
http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html
http://www.ubuntu.com/usn/USN-1705-1
https://code.google.com/p/chromium/issues/detail?id=161639
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16007

URL

タグ

http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html

http://libav.org/releases/libav-0.7.7.changelog

http://libav.org/releases/libav-0.8.5.changelog

http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html

http://www.ubuntu.com/usn/USN-1705-1

https://code.google.com/p/chromium/issues/detail?id=161639

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16007

CVE-2012-5144

CVE-2012-5144 の EPSS（Exploit Prediction Scoring System）スコア

CVE-2012-5144 の CVSS（Common Vulnerability Scoring System）指標

CVE-2012-5144 の弱点分類（列挙）

CVE-2012-5144 の OS トラッカー

CVE-2012-5144 の影響を受けるソフトウェア／構成

CVE-2012-5144 の参考情報