CVE-2006-4799: Buffer Overflow
Published Sep 14, 2006
·Updated
Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
Affected Software
4 affected components
xine Xine-lib=1.1.0
xine Xine-lib<=1.1.1
xine Xine-lib=1.0.1
xine Xine-lib=1.0.2
Event History
Sep 14, 2006
CVE Published
09:07 PM
Sep 15, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4799?
CVE-2006-4799 has a high severity rating due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2006-4799?
To fix CVE-2006-4799, upgrade xine-lib to version 1.1.2 or later.
3
Which versions of xine-lib are affected by CVE-2006-4799?
CVE-2006-4799 affects xine-lib versions prior to 1.1.2, including 1.1.0 and up to 1.1.1.
4
What type of vulnerability is CVE-2006-4799?
CVE-2006-4799 is a buffer overflow vulnerability.
5
Can CVE-2006-4799 be exploited through a specific file type?
Yes, CVE-2006-4799 can be exploited via crafted AVI files with bad indexes.