Back to search
CVE-2009-4635
Published: Feb 10, 2010
Modified: Aug 7, 2024
PUBLISHED
Description
FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to use inconsistent codec types and identifiers, leading to processing of a video-structure pointer by the mp3 decoder, and a stack-based buffer overflow.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
MDVSA-2011:088
vendor-advisory
x_refsource_MANDRIVA
36805
third-party-advisory
x_refsource_SECUNIA
36465
vdb-entry
x_refsource_BID
39482
third-party-advisory
x_refsource_SECUNIA
https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240
x_refsource_MISC
MDVSA-2011:061
vendor-advisory
x_refsource_MANDRIVA
MDVSA-2011:112
vendor-advisory
x_refsource_MANDRIVA
MDVSA-2011:114
vendor-advisory
x_refsource_MANDRIVA
MDVSA-2011:059
vendor-advisory
x_refsource_MANDRIVA
38643
third-party-advisory
x_refsource_SECUNIA
ADV-2011-1241
vdb-entry
x_refsource_VUPEN
MDVSA-2011:060
vendor-advisory
x_refsource_MANDRIVA
DSA-2000
vendor-advisory
x_refsource_DEBIAN
USN-931-1
vendor-advisory
x_refsource_UBUNTU
ADV-2010-0935
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now