CVE-2006-4800

2006-09-1422:07:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.214

Percentile

96.5%

JSON

Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.

Affected configurations

Nvd

Node

ffmpegffmpegMatch0.4.6

ffmpegffmpegMatch0.4.7

ffmpegffmpegMatch0.4.8

ffmpegffmpegMatch0.4.9

VendorProductVersionCPE
ffmpegffmpeg0.4.6cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*
ffmpegffmpeg0.4.7cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*
ffmpegffmpeg0.4.8cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*
ffmpegffmpeg0.4.9cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ffmpeg	ffmpeg	0.4.6	cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:::::::*
ffmpeg	ffmpeg	0.4.7	cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:::::::*
ffmpeg	ffmpeg	0.4.8	cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:::::::*
ffmpeg	ffmpeg	0.4.9	cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:::::::*