Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4868
HistoryNov 01, 2008 - 12:00 a.m.

CVE-2008-4868

2008-11-0100:00:00
ubuntu.com
ubuntu.com
7

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

65.6%

Unspecified vulnerability in the avcodec_close function in
libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has
unknown impact and attack vectors, related to a free “on random pointers.”

Bugs

Notes

Author Note
mdeslaur Code in ffmpeg in gutsy, hardy, intrepid and jaunty doesn’t free, so not vulnerable. kino is built with --disable-local-ffmpeg, so it’s not vulnerable

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

65.6%