CVE Vulnerabilities

CVE-2006-4800

Published: Sep 14, 2006 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.

Affected Software

Name Vendor Start Version End Version
Ffmpeg Ffmpeg 0.4.6 (including) 0.4.6 (including)
Ffmpeg Ffmpeg 0.4.7 (including) 0.4.7 (including)
Ffmpeg Ffmpeg 0.4.8 (including) 0.4.8 (including)
Ffmpeg Ffmpeg 0.4.9 (including) 0.4.9 (including)
Ffmpeg Ubuntu dapper *
Gst-ffmpeg Ubuntu dapper *
Gst-ffmpeg Ubuntu edgy *
Gst-ffmpeg Ubuntu feisty *
Gstreamer0.10-ffmpeg Ubuntu dapper *
Gstreamer0.10-ffmpeg Ubuntu devel *
Gstreamer0.10-ffmpeg Ubuntu edgy *
Gstreamer0.10-ffmpeg Ubuntu feisty *

References