CVE-2005-4048
EPSS 5.2%ffmpeg - buffer overflow
Published: 12/7/2005Modified: 4/28/2026
Description
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
Affected packages (5)
- Debian/ffmpegfrom 0, < 0.cvs20050918-5.1
- Debian/ffmpegfrom 0, < 0.cvs20050313-2sarge1
- Debian/vlcfrom 0, < 0.8.4.debian-2
- Debian/vlcfrom 0, < 0.8.1.svn20050314-1sarge1
- Debian/xine-libfrom 0, < 1.0.1-1sarge2