CVE-2005-4048

2005-12-0700:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.015

Percentile

87.1%

JSON

Heap-based buffer overflow in the avcodec_default_get_buffer function
(utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products
such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows
remote attackers to execute arbitrary commands via small PNG images with
palettes.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchffmpeg< 3:0.cvs20050918-5ubuntu1.2UNKNOWN
ubuntu6.10noarchffmpeg< 0.cvs20060823-3.1ubuntu1UNKNOWN
ubuntu7.04noarchffmpeg< 0.cvs20060823-3.1ubuntu1UNKNOWN
ubuntu7.10noarchffmpeg< 0.cvs20060823-3.1ubuntu1UNKNOWN
ubuntu8.04noarchffmpeg< 0.cvs20060823-3.1ubuntu1UNKNOWN
ubuntu6.06noarchgst-ffmpeg< 0.8.7-5ubuntu1UNKNOWN
ubuntu6.10noarchgst-ffmpeg< 0.8.7-5ubuntu1UNKNOWN
ubuntu7.04noarchgst-ffmpeg< 0.8.7-5ubuntu1UNKNOWN
ubuntu6.06noarchgstreamer0.10-ffmpeg< 0.10.1-0ubuntu2UNKNOWN
ubuntu6.10noarchgstreamer0.10-ffmpeg< 0.10.1-0ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	ffmpeg	< 3:0.cvs20050918-5ubuntu1.2	UNKNOWN
ubuntu	6.10	noarch	ffmpeg	< 0.cvs20060823-3.1ubuntu1	UNKNOWN
ubuntu	7.04	noarch	ffmpeg	< 0.cvs20060823-3.1ubuntu1	UNKNOWN
ubuntu	7.10	noarch	ffmpeg	< 0.cvs20060823-3.1ubuntu1	UNKNOWN
ubuntu	8.04	noarch	ffmpeg	< 0.cvs20060823-3.1ubuntu1	UNKNOWN
ubuntu	6.06	noarch	gst-ffmpeg	< 0.8.7-5ubuntu1	UNKNOWN
ubuntu	6.10	noarch	gst-ffmpeg	< 0.8.7-5ubuntu1	UNKNOWN
ubuntu	7.04	noarch	gst-ffmpeg	< 0.8.7-5ubuntu1	UNKNOWN
ubuntu	6.06	noarch	gstreamer0.10-ffmpeg	< 0.10.1-0ubuntu2	UNKNOWN
ubuntu	6.10	noarch	gstreamer0.10-ffmpeg	< 0.10.1-0ubuntu2	UNKNOWN