CVE-2010-3429 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset d...
MediumCVSS 6.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ffmpeg libavcodec | All versions | No fix listed |
| ffmpeg/ffmpeg | <= 0.6 | No fix listed |
| ffmpeg/ffmpeg | = 0.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.1 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.3.4 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.0 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.2 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.3 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.4 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.5 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.6 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.7 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.8 | No fix listed |
| ffmpeg/ffmpeg | = 0.4.9-pre1 | No fix listed |
| ffmpeg/ffmpeg | = 0.5 | No fix listed |
| mplayerhq mplayer | <= 1.0 | No fix listed |
| mplayerhq mplayer | = 0.01 | No fix listed |
| mplayerhq mplayer | = 0.02 | No fix listed |
| mplayerhq mplayer | = 0.05 | No fix listed |
| mplayerhq mplayer | = 0.06 | No fix listed |
| mplayerhq mplayer | = 0.07 | No fix listed |
| mplayerhq mplayer | = 0.08 | No fix listed |
| mplayerhq mplayer | = 0.09 | No fix listed |
Show 86 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mplayerhq mplayer | = 0.09-pre3 | No fix listed |
| mplayerhq mplayer | = 0.10 | No fix listed |
| mplayerhq mplayer | = 0.10-pre1 | No fix listed |
| mplayerhq mplayer | = 0.10-pre2 | No fix listed |
| mplayerhq mplayer | = 0.10-pre3 | No fix listed |
| mplayerhq mplayer | = 0.10-pre4 | No fix listed |
| mplayerhq mplayer | = 0.10-pre5 | No fix listed |
| mplayerhq mplayer | = 0.10-pre6 | No fix listed |
| mplayerhq mplayer | = 0.10-pre7 | No fix listed |
| mplayerhq mplayer | = 0.11-pre10 | No fix listed |
| mplayerhq mplayer | = 0.11-pre11 | No fix listed |
| mplayerhq mplayer | = 0.11-pre12 | No fix listed |
| mplayerhq mplayer | = 0.11-pre13 | No fix listed |
| mplayerhq mplayer | = 0.11-pre14 | No fix listed |
| mplayerhq mplayer | = 0.11-pre15 | No fix listed |
| mplayerhq mplayer | = 0.11-pre16 | No fix listed |
| mplayerhq mplayer | = 0.11-pre17 | No fix listed |
| mplayerhq mplayer | = 0.11-pre18 | No fix listed |
| mplayerhq mplayer | = 0.11-pre19 | No fix listed |
| mplayerhq mplayer | = 0.11-pre2 | No fix listed |
| mplayerhq mplayer | = 0.11-pre20 | No fix listed |
| mplayerhq mplayer | = 0.11-pre21 | No fix listed |
| mplayerhq mplayer | = 0.11-pre22 | No fix listed |
| mplayerhq mplayer | = 0.11-pre23 | No fix listed |
| mplayerhq mplayer | = 0.11-pre24 | No fix listed |
| mplayerhq mplayer | = 0.11-pre3 | No fix listed |
| mplayerhq mplayer | = 0.11-pre4 | No fix listed |
| mplayerhq mplayer | = 0.11-pre5 | No fix listed |
| mplayerhq mplayer | = 0.11-pre6 | No fix listed |
| mplayerhq mplayer | = 0.11-pre7 | No fix listed |
| mplayerhq mplayer | = 0.11-pre8 | No fix listed |
| mplayerhq mplayer | = 0.11-pre9 | No fix listed |
| mplayerhq mplayer | = 0.17_idegcounter | No fix listed |
| mplayerhq mplayer | = 0.17a_idegcounter | No fix listed |
| mplayerhq mplayer | = 0.18-pre1 | No fix listed |
| mplayerhq mplayer | = 0.18-pre2 | No fix listed |
| mplayerhq mplayer | = 0.18-pre3 | No fix listed |
| mplayerhq mplayer | = 0.18-pre4 | No fix listed |
| mplayerhq mplayer | = 0.18-pre5 | No fix listed |
| mplayerhq mplayer | = 0.50 | No fix listed |
| mplayerhq mplayer | = 0.50-pre1 | No fix listed |
| mplayerhq mplayer | = 0.50-pre2 | No fix listed |
| mplayerhq mplayer | = 0.50-pre3 | No fix listed |
| mplayerhq mplayer | = 0.60 | No fix listed |
| mplayerhq mplayer | = 0.60-pre1 | No fix listed |
| mplayerhq mplayer | = 0.60-pre2 | No fix listed |
| mplayerhq mplayer | = 0.90 | No fix listed |
| mplayerhq mplayer | = 0.90-pre1 | No fix listed |
| mplayerhq mplayer | = 0.90-pre10 | No fix listed |
| mplayerhq mplayer | = 0.90-pre2 | No fix listed |
| mplayerhq mplayer | = 0.90-pre3 | No fix listed |
| mplayerhq mplayer | = 0.90-pre4 | No fix listed |
| mplayerhq mplayer | = 0.90-pre5 | No fix listed |
| mplayerhq mplayer | = 0.90-pre6 | No fix listed |
| mplayerhq mplayer | = 0.90-pre7 | No fix listed |
| mplayerhq mplayer | = 0.90-pre8 | No fix listed |
| mplayerhq mplayer | = 0.90-pre9 | No fix listed |
| mplayerhq mplayer | = 0.90-rc1 | No fix listed |
| mplayerhq mplayer | = 0.90-rc2 | No fix listed |
| mplayerhq mplayer | = 0.90-rc3 | No fix listed |
| mplayerhq mplayer | = 0.90-rc3-pre1 | No fix listed |
| mplayerhq mplayer | = 0.90-rc3-pre2 | No fix listed |
| mplayerhq mplayer | = 0.90-rc3-pre3 | No fix listed |
| mplayerhq mplayer | = 0.90-rc4 | No fix listed |
| mplayerhq mplayer | = 0.90-rc5 | No fix listed |
| mplayerhq mplayer | = 0.91 | No fix listed |
| mplayerhq mplayer | = 0.92 | No fix listed |
| mplayerhq mplayer | = 0.92.1 | No fix listed |
| mplayerhq mplayer | = 0.93 | No fix listed |
| mplayerhq mplayer | = 1.0-pre1 | No fix listed |
| mplayerhq mplayer | = 1.0-pre2 | No fix listed |
| mplayerhq mplayer | = 1.0-pre3 | No fix listed |
| mplayerhq mplayer | = 1.0-pre3try2 | No fix listed |
| mplayerhq mplayer | = 1.0-pre4 | No fix listed |
| mplayerhq mplayer | = 1.0-pre5 | No fix listed |
| mplayerhq mplayer | = 1.0-pre5try2 | No fix listed |
| mplayerhq mplayer | = 1.0-pre6 | No fix listed |
| mplayerhq mplayer | = 1.0-pre6a | No fix listed |
| mplayerhq mplayer | = 1.0-pre7 | No fix listed |
| mplayerhq mplayer | = 1.0-pre7try2 | No fix listed |
| mplayerhq mplayer | = 1.0-pre8 | No fix listed |
| mplayerhq mplayer | = 1.0-rc1 | No fix listed |
| mplayerhq mplayer | = 1.0-rc2 | No fix listed |
| debian/ffmpeg(Debian:12) | < 4:0.5.2-6 | 4:0.5.2-6 |
| debian/ffmpeg(Debian:13) | < 4:0.5.2-6 | 4:0.5.2-6 |
| debian/ffmpeg(Debian:14) | < 4:0.5.2-6 | 4:0.5.2-6 |
References
- git.ffmpeg.org
- 41626 third-party-advisory vendor-advisory
- 43323 third-party-advisory
- DSA-2165 vendor-advisory
- MDVSA-2011:060 vendor-advisory
- MDVSA-2011:061 vendor-advisory
- MDVSA-2011:062 vendor-advisory
- MDVSA-2011:088 vendor-advisory
- MDVSA-2011:089 vendor-advisory
- MDVSA-2011:112 vendor-advisory
- MDVSA-2011:114 vendor-advisory
- www.ocert.org
- [oss-security] 20100928 [oCERT-2010-004] FFmpeg/libavcodec arbitrary offset dereference mailing-list
- 20100928 [oCERT-2010-004] FFmpeg/libavcodec arbitrary offset dereference mailing-list
- USN-1104-1 vendor-advisory
- ADV-2010-2517 patch vdb-entry vendor-advisory
- ADV-2010-2518 vdb-entry vendor-advisory
- ADV-2011-1241 vdb-entry
- bugzilla.redhat.com
- Debian Security Tracker CVE-2010-3429 vendor-advisory
- bugs.debian.org issue-tracking