6.8

CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ffmpeg ≫ Ffmpeg Version <= 0.6
Ffmpeg ≫ Ffmpeg Version0.3
Ffmpeg ≫ Ffmpeg Version0.3.1
Ffmpeg ≫ Ffmpeg Version0.3.2
Ffmpeg ≫ Ffmpeg Version0.3.3
Ffmpeg ≫ Ffmpeg Version0.3.4
Ffmpeg ≫ Ffmpeg Version0.4.0
Ffmpeg ≫ Ffmpeg Version0.4.2
Ffmpeg ≫ Ffmpeg Version0.4.3
Ffmpeg ≫ Ffmpeg Version0.4.4
Ffmpeg ≫ Ffmpeg Version0.4.5
Ffmpeg ≫ Ffmpeg Version0.4.6
Ffmpeg ≫ Ffmpeg Version0.4.7
Ffmpeg ≫ Ffmpeg Version0.4.8
Ffmpeg ≫ Ffmpeg Version0.4.9 Updatepre1
Ffmpeg ≫ Ffmpeg Version0.5
Mplayerhq ≫ Mplayer Updaterc3 Version <= 1.0
Mplayerhq ≫ Mplayer Version0.01
Mplayerhq ≫ Mplayer Version0.02
Mplayerhq ≫ Mplayer Version0.05
Mplayerhq ≫ Mplayer Version0.06
Mplayerhq ≫ Mplayer Version0.07
Mplayerhq ≫ Mplayer Version0.08
Mplayerhq ≫ Mplayer Version0.09
Mplayerhq ≫ Mplayer Version0.09 Updatepre3
Mplayerhq ≫ Mplayer Version0.10
Mplayerhq ≫ Mplayer Version0.10 Updatepre1
Mplayerhq ≫ Mplayer Version0.10 Updatepre2
Mplayerhq ≫ Mplayer Version0.10 Updatepre3
Mplayerhq ≫ Mplayer Version0.10 Updatepre4
Mplayerhq ≫ Mplayer Version0.10 Updatepre5
Mplayerhq ≫ Mplayer Version0.10 Updatepre6
Mplayerhq ≫ Mplayer Version0.10 Updatepre7
Mplayerhq ≫ Mplayer Version0.11 Updatepre10
Mplayerhq ≫ Mplayer Version0.11 Updatepre11
Mplayerhq ≫ Mplayer Version0.11 Updatepre12
Mplayerhq ≫ Mplayer Version0.11 Updatepre13
Mplayerhq ≫ Mplayer Version0.11 Updatepre14
Mplayerhq ≫ Mplayer Version0.11 Updatepre15
Mplayerhq ≫ Mplayer Version0.11 Updatepre16
Mplayerhq ≫ Mplayer Version0.11 Updatepre17
Mplayerhq ≫ Mplayer Version0.11 Updatepre18
Mplayerhq ≫ Mplayer Version0.11 Updatepre19
Mplayerhq ≫ Mplayer Version0.11 Updatepre2
Mplayerhq ≫ Mplayer Version0.11 Updatepre20
Mplayerhq ≫ Mplayer Version0.11 Updatepre21
Mplayerhq ≫ Mplayer Version0.11 Updatepre22
Mplayerhq ≫ Mplayer Version0.11 Updatepre23
Mplayerhq ≫ Mplayer Version0.11 Updatepre24
Mplayerhq ≫ Mplayer Version0.11 Updatepre3
Mplayerhq ≫ Mplayer Version0.11 Updatepre4
Mplayerhq ≫ Mplayer Version0.11 Updatepre5
Mplayerhq ≫ Mplayer Version0.11 Updatepre6
Mplayerhq ≫ Mplayer Version0.11 Updatepre7
Mplayerhq ≫ Mplayer Version0.11 Updatepre8
Mplayerhq ≫ Mplayer Version0.11 Updatepre9
Mplayerhq ≫ Mplayer Version0.17_idegcounter
Mplayerhq ≫ Mplayer Version0.17a_idegcounter
Mplayerhq ≫ Mplayer Version0.18 Updatepre1
Mplayerhq ≫ Mplayer Version0.18 Updatepre2
Mplayerhq ≫ Mplayer Version0.18 Updatepre3
Mplayerhq ≫ Mplayer Version0.18 Updatepre4
Mplayerhq ≫ Mplayer Version0.18 Updatepre5
Mplayerhq ≫ Mplayer Version0.50
Mplayerhq ≫ Mplayer Version0.50 Updatepre1
Mplayerhq ≫ Mplayer Version0.50 Updatepre2
Mplayerhq ≫ Mplayer Version0.50 Updatepre3
Mplayerhq ≫ Mplayer Version0.60
Mplayerhq ≫ Mplayer Version0.60 Updatepre1
Mplayerhq ≫ Mplayer Version0.60 Updatepre2
Mplayerhq ≫ Mplayer Version0.90
Mplayerhq ≫ Mplayer Version0.90 Updatepre1
Mplayerhq ≫ Mplayer Version0.90 Updatepre10
Mplayerhq ≫ Mplayer Version0.90 Updatepre2
Mplayerhq ≫ Mplayer Version0.90 Updatepre3
Mplayerhq ≫ Mplayer Version0.90 Updatepre4
Mplayerhq ≫ Mplayer Version0.90 Updatepre5
Mplayerhq ≫ Mplayer Version0.90 Updatepre6
Mplayerhq ≫ Mplayer Version0.90 Updatepre7
Mplayerhq ≫ Mplayer Version0.90 Updatepre8
Mplayerhq ≫ Mplayer Version0.90 Updatepre9
Mplayerhq ≫ Mplayer Version0.90 Updaterc1
Mplayerhq ≫ Mplayer Version0.90 Updaterc2
Mplayerhq ≫ Mplayer Version0.90 Updaterc3
Mplayerhq ≫ Mplayer Version0.90 Updaterc3-pre1
Mplayerhq ≫ Mplayer Version0.90 Updaterc3-pre2
Mplayerhq ≫ Mplayer Version0.90 Updaterc3-pre3
Mplayerhq ≫ Mplayer Version0.90 Updaterc4
Mplayerhq ≫ Mplayer Version0.90 Updaterc5
Mplayerhq ≫ Mplayer Version0.91
Mplayerhq ≫ Mplayer Version0.92
Mplayerhq ≫ Mplayer Version0.92.1
Mplayerhq ≫ Mplayer Version0.93
Mplayerhq ≫ Mplayer Version1.0 Updatepre1
Mplayerhq ≫ Mplayer Version1.0 Updatepre2
Mplayerhq ≫ Mplayer Version1.0 Updatepre3
Mplayerhq ≫ Mplayer Version1.0 Updatepre3try2
Mplayerhq ≫ Mplayer Version1.0 Updatepre4
Mplayerhq ≫ Mplayer Version1.0 Updatepre5
Mplayerhq ≫ Mplayer Version1.0 Updatepre5try2
Mplayerhq ≫ Mplayer Version1.0 Updatepre6
Mplayerhq ≫ Mplayer Version1.0 Updatepre6a
Mplayerhq ≫ Mplayer Version1.0 Updatepre7
Mplayerhq ≫ Mplayer Version1.0 Updatepre7try2
Mplayerhq ≫ Mplayer Version1.0 Updatepre8
Mplayerhq ≫ Mplayer Version1.0 Updaterc1
Mplayerhq ≫ Mplayer Version1.0 Updaterc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.18% 0.896
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
http://www.vupen.com/english/advisories/2011/1241
http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b
http://secunia.com/advisories/41626
Vendor Advisory
http://secunia.com/advisories/43323
http://www.debian.org/security/2011/dsa-2165
http://www.ocert.org/advisories/ocert-2010-004.html
http://www.openwall.com/lists/oss-security/2010/09/28/4
http://www.securityfocus.com/archive/1/514009/100/0/threaded
http://www.ubuntu.com/usn/usn-1104-1/
http://www.vupen.com/english/advisories/2010/2517
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2518
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=635775