p PatchFirst

CVE-2005-4048

CVE-2005-4048

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.

EPSS 5.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • ffmpeg Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.cvs20050918-5.1

    Update to 0.cvs20050918-5.1

  • ffmpeg Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.cvs20050918-5.1

    Update to 0.cvs20050918-5.1

  • ffmpeg Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.cvs20050918-5.1

    Update to 0.cvs20050918-5.1

  • vlc Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.8.4.debian-2

    Update to 0.8.4.debian-2

  • vlc Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.8.4.debian-2

    Update to 0.8.4.debian-2

  • vlc Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.8.4.debian-2

    Update to 0.8.4.debian-2

Original sources

Check your server →