CVE-2008-4868

2008-11-0100:00:01

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.003

Percentile

65.6%

JSON

Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free “on random pointers.”

OSVersionArchitecturePackageVersionFilename
Debian12allffmpeg< 7:5.1.6-0+deb12u1ffmpeg_7:5.1.6-0+deb12u1_all.deb
Debian11allffmpeg< 7:4.3.7-0+deb11u1ffmpeg_7:4.3.7-0+deb11u1_all.deb
Debian999allffmpeg< 7:7.0.2-3ffmpeg_7:7.0.2-3_all.deb
Debian13allffmpeg< 7:7.0.2-3ffmpeg_7:7.0.2-3_all.deb
Debian12allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb
Debian11allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb
Debian999allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ffmpeg	< 7:5.1.6-0+deb12u1	ffmpeg_7:5.1.6-0+deb12u1_all.deb
Debian	11	all	ffmpeg	< 7:4.3.7-0+deb11u1	ffmpeg_7:4.3.7-0+deb11u1_all.deb
Debian	999	all	ffmpeg	< 7:7.0.2-3	ffmpeg_7:7.0.2-3_all.deb
Debian	13	all	ffmpeg	< 7:7.0.2-3	ffmpeg_7:7.0.2-3_all.deb
Debian	12	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb
Debian	11	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb
Debian	999	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb