CVE-2009-0385

2009-02-0219:30:00

Debian Security Bug Tracker

security-tracker.debian.org

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.495 Medium

EPSS

Percentile

97.5%

JSON

Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference.

OSVersionArchitecturePackageVersionFilename
Debian12allffmpeg< 0.svn20080206-16ffmpeg_0.svn20080206-16_all.deb
Debian11allffmpeg< 0.svn20080206-16ffmpeg_0.svn20080206-16_all.deb
Debian10allffmpeg< 0.svn20080206-16ffmpeg_0.svn20080206-16_all.deb
Debian999allffmpeg< 0.svn20080206-16ffmpeg_0.svn20080206-16_all.deb
Debian13allffmpeg< 0.svn20080206-16ffmpeg_0.svn20080206-16_all.deb
Debian12allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb
Debian11allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb
Debian10allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb
Debian999allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb
Debian13allmplayer< 1.0~rc2-14mplayer_1.0~rc2-14_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	ffmpeg	< 0.svn20080206-16	ffmpeg_0.svn20080206-16_all.deb
Debian	11	all	ffmpeg	< 0.svn20080206-16	ffmpeg_0.svn20080206-16_all.deb
Debian	10	all	ffmpeg	< 0.svn20080206-16	ffmpeg_0.svn20080206-16_all.deb
Debian	999	all	ffmpeg	< 0.svn20080206-16	ffmpeg_0.svn20080206-16_all.deb
Debian	13	all	ffmpeg	< 0.svn20080206-16	ffmpeg_0.svn20080206-16_all.deb
Debian	12	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb
Debian	11	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb
Debian	10	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb
Debian	999	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb
Debian	13	all	mplayer	< 1.0~rc2-14	mplayer_1.0~rc2-14_all.deb