6.8

CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ffmpeg ≫ Ffmpeg Version <= 0.6
Ffmpeg ≫ Ffmpeg Version 0.3
Ffmpeg ≫ Ffmpeg Version 0.3.1
Ffmpeg ≫ Ffmpeg Version 0.3.2
Ffmpeg ≫ Ffmpeg Version 0.3.3
Ffmpeg ≫ Ffmpeg Version 0.3.4
Ffmpeg ≫ Ffmpeg Version 0.4.0
Ffmpeg ≫ Ffmpeg Version 0.4.2
Ffmpeg ≫ Ffmpeg Version 0.4.3
Ffmpeg ≫ Ffmpeg Version 0.4.4
Ffmpeg ≫ Ffmpeg Version 0.4.5
Ffmpeg ≫ Ffmpeg Version 0.4.6
Ffmpeg ≫ Ffmpeg Version 0.4.7
Ffmpeg ≫ Ffmpeg Version 0.4.8
Ffmpeg ≫ Ffmpeg Version 0.4.9 Update pre1
Ffmpeg ≫ Ffmpeg Version 0.5
Mplayerhq ≫ Mplayer Update rc3 Version <= 1.0
Mplayerhq ≫ Mplayer Version 0.01
Mplayerhq ≫ Mplayer Version 0.02
Mplayerhq ≫ Mplayer Version 0.05
Mplayerhq ≫ Mplayer Version 0.06
Mplayerhq ≫ Mplayer Version 0.07
Mplayerhq ≫ Mplayer Version 0.08
Mplayerhq ≫ Mplayer Version 0.09
Mplayerhq ≫ Mplayer Version 0.09 Update pre3
Mplayerhq ≫ Mplayer Version 0.10
Mplayerhq ≫ Mplayer Version 0.10 Update pre1
Mplayerhq ≫ Mplayer Version 0.10 Update pre2
Mplayerhq ≫ Mplayer Version 0.10 Update pre3
Mplayerhq ≫ Mplayer Version 0.10 Update pre4
Mplayerhq ≫ Mplayer Version 0.10 Update pre5
Mplayerhq ≫ Mplayer Version 0.10 Update pre6
Mplayerhq ≫ Mplayer Version 0.10 Update pre7
Mplayerhq ≫ Mplayer Version 0.11 Update pre10
Mplayerhq ≫ Mplayer Version 0.11 Update pre11
Mplayerhq ≫ Mplayer Version 0.11 Update pre12
Mplayerhq ≫ Mplayer Version 0.11 Update pre13
Mplayerhq ≫ Mplayer Version 0.11 Update pre14
Mplayerhq ≫ Mplayer Version 0.11 Update pre15
Mplayerhq ≫ Mplayer Version 0.11 Update pre16
Mplayerhq ≫ Mplayer Version 0.11 Update pre17
Mplayerhq ≫ Mplayer Version 0.11 Update pre18
Mplayerhq ≫ Mplayer Version 0.11 Update pre19
Mplayerhq ≫ Mplayer Version 0.11 Update pre2
Mplayerhq ≫ Mplayer Version 0.11 Update pre20
Mplayerhq ≫ Mplayer Version 0.11 Update pre21
Mplayerhq ≫ Mplayer Version 0.11 Update pre22
Mplayerhq ≫ Mplayer Version 0.11 Update pre23
Mplayerhq ≫ Mplayer Version 0.11 Update pre24
Mplayerhq ≫ Mplayer Version 0.11 Update pre3
Mplayerhq ≫ Mplayer Version 0.11 Update pre4
Mplayerhq ≫ Mplayer Version 0.11 Update pre5
Mplayerhq ≫ Mplayer Version 0.11 Update pre6
Mplayerhq ≫ Mplayer Version 0.11 Update pre7
Mplayerhq ≫ Mplayer Version 0.11 Update pre8
Mplayerhq ≫ Mplayer Version 0.11 Update pre9
Mplayerhq ≫ Mplayer Version 0.17_idegcounter
Mplayerhq ≫ Mplayer Version 0.17a_idegcounter
Mplayerhq ≫ Mplayer Version 0.18 Update pre1
Mplayerhq ≫ Mplayer Version 0.18 Update pre2
Mplayerhq ≫ Mplayer Version 0.18 Update pre3
Mplayerhq ≫ Mplayer Version 0.18 Update pre4
Mplayerhq ≫ Mplayer Version 0.18 Update pre5
Mplayerhq ≫ Mplayer Version 0.50
Mplayerhq ≫ Mplayer Version 0.50 Update pre1
Mplayerhq ≫ Mplayer Version 0.50 Update pre2
Mplayerhq ≫ Mplayer Version 0.50 Update pre3
Mplayerhq ≫ Mplayer Version 0.60
Mplayerhq ≫ Mplayer Version 0.60 Update pre1
Mplayerhq ≫ Mplayer Version 0.60 Update pre2
Mplayerhq ≫ Mplayer Version 0.90
Mplayerhq ≫ Mplayer Version 0.90 Update pre1
Mplayerhq ≫ Mplayer Version 0.90 Update pre10
Mplayerhq ≫ Mplayer Version 0.90 Update pre2
Mplayerhq ≫ Mplayer Version 0.90 Update pre3
Mplayerhq ≫ Mplayer Version 0.90 Update pre4
Mplayerhq ≫ Mplayer Version 0.90 Update pre5
Mplayerhq ≫ Mplayer Version 0.90 Update pre6
Mplayerhq ≫ Mplayer Version 0.90 Update pre7
Mplayerhq ≫ Mplayer Version 0.90 Update pre8
Mplayerhq ≫ Mplayer Version 0.90 Update pre9
Mplayerhq ≫ Mplayer Version 0.90 Update rc1
Mplayerhq ≫ Mplayer Version 0.90 Update rc2
Mplayerhq ≫ Mplayer Version 0.90 Update rc3
Mplayerhq ≫ Mplayer Version 0.90 Update rc3-pre1
Mplayerhq ≫ Mplayer Version 0.90 Update rc3-pre2
Mplayerhq ≫ Mplayer Version 0.90 Update rc3-pre3
Mplayerhq ≫ Mplayer Version 0.90 Update rc4
Mplayerhq ≫ Mplayer Version 0.90 Update rc5
Mplayerhq ≫ Mplayer Version 0.91
Mplayerhq ≫ Mplayer Version 0.92
Mplayerhq ≫ Mplayer Version 0.92.1
Mplayerhq ≫ Mplayer Version 0.93
Mplayerhq ≫ Mplayer Version 1.0 Update pre1
Mplayerhq ≫ Mplayer Version 1.0 Update pre2
Mplayerhq ≫ Mplayer Version 1.0 Update pre3
Mplayerhq ≫ Mplayer Version 1.0 Update pre3try2
Mplayerhq ≫ Mplayer Version 1.0 Update pre4
Mplayerhq ≫ Mplayer Version 1.0 Update pre5
Mplayerhq ≫ Mplayer Version 1.0 Update pre5try2
Mplayerhq ≫ Mplayer Version 1.0 Update pre6
Mplayerhq ≫ Mplayer Version 1.0 Update pre6a
Mplayerhq ≫ Mplayer Version 1.0 Update pre7
Mplayerhq ≫ Mplayer Version 1.0 Update pre7try2
Mplayerhq ≫ Mplayer Version 1.0 Update pre8
Mplayerhq ≫ Mplayer Version 1.0 Update rc1
Mplayerhq ≫ Mplayer Version 1.0 Update rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.18% 0.896
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
http://www.vupen.com/english/advisories/2011/1241
http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b
http://secunia.com/advisories/41626
Vendor Advisory
http://secunia.com/advisories/43323
http://www.debian.org/security/2011/dsa-2165
http://www.ocert.org/advisories/ocert-2010-004.html
http://www.openwall.com/lists/oss-security/2010/09/28/4
http://www.securityfocus.com/archive/1/514009/100/0/threaded
http://www.ubuntu.com/usn/usn-1104-1/
http://www.vupen.com/english/advisories/2010/2517
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2518
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=635775