CVE-2010-3429
CVE-2010-3429
This page contains facts from public vulnerability sources. Check the original advisory before updating.
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
EPSS 4.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
- http://www.openwall.com/lists/oss-security/2010/09/28/4
- http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
- http://www.securityfocus.com/archive/1/514009/100/0/threaded
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
- http://secunia.com/advisories/43323
- http://www.ubuntu.com/usn/usn-1104-1/
- http://www.vupen.com/english/advisories/2010/2518
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
- http://www.vupen.com/english/advisories/2010/2517
- http://www.debian.org/security/2011/dsa-2165
- http://www.vupen.com/english/advisories/2011/1241
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
- http://secunia.com/advisories/41626
- https://bugzilla.redhat.com/show_bug.cgi?id=635775
- http://www.ocert.org/advisories/ocert-2010-004.html
- https://nvd.nist.gov/vuln/detail/CVE-2010-3429