CVE-2006-4800

published 2006-09-14

CVE-2006-4800: Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code…

Priority P3 34 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
debian	ffmpeg	< ffmpeg 0.cvs20060329-1 (bookworm)	ffmpeg 0.cvs20060329-1 (bookworm)
debian	mplayer	< ffmpeg 0.cvs20060329-1 (bookworm)	ffmpeg 0.cvs20060329-1 (bookworm)
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	—	—
ffmpeg	ffmpeg	>= 0 < 0.cvs20060329-1	0.cvs20060329-1
ffmpeg	ffmpeg	>= 0 < 0.cvs20060329-1	0.cvs20060329-1
ffmpeg	ffmpeg	>= 0 < 0.cvs20060329-1	0.cvs20060329-1
ffmpeg	ffmpeg	>= 0 < 0.cvs20060329-1	0.cvs20060329-1
mplayer	mplayer	>= 0 < 1.0~rc1-1	1.0~rc1-1
mplayer	mplayer	>= 0 < 1.0~rc1-1	1.0~rc1-1
mplayer	mplayer	>= 0 < 1.0~rc1-1	1.0~rc1-1
mplayer	mplayer	>= 0 < 1.0~rc1-1	1.0~rc1-1

CVSS provenance

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 7.5 HIGH

vendor_debian 7.5 HIGH

vendor_ubuntu 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.