CVE-2005-4048
EPSS 5.2%ffmpeg - buffer overflow
發布日:2005/12/7修改日:2026/4/28
也稱為:DEBIAN-CVE-2005-4048
描述
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
受影響套件(5)
- Debian/ffmpegfrom 0, < 0.cvs20050918-5.1
- Debian/ffmpegfrom 0, < 0.cvs20050313-2sarge1
- Debian/vlcfrom 0, < 0.8.4.debian-2
- Debian/vlcfrom 0, < 0.8.1.svn20050314-1sarge1
- Debian/xine-libfrom 0, < 1.0.1-1sarge2