CVE-2009-4636: Code Injection
Published Feb 10, 2010
·Updated
FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop.
Affected Software
1 affected component
FFmpeg FFmpeg=0.5
Remediation
Event History
Feb 10, 2010
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:30 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4636?
CVE-2009-4636 is considered a denial of service vulnerability that can cause an application hang.
2
How do I fix CVE-2009-4636?
To fix CVE-2009-4636, upgrade to a later version of FFmpeg that addresses this vulnerability.
3
What versions of FFmpeg are affected by CVE-2009-4636?
Only FFmpeg version 0.5 is affected by CVE-2009-4636.
4
Can CVE-2009-4636 be exploited remotely?
Yes, CVE-2009-4636 can be exploited remotely through a crafted file.
5
What type of attack does CVE-2009-4636 involve?
CVE-2009-4636 involves a denial of service attack that triggers an infinite loop in the application.