CVE-2010-3429: Code Injection
First published: Mon Sep 20 2010(Updated: )
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ffmpeg Libavcodec | ||
| FFmpeg FFmpeg | <=0.6 | |
| FFmpeg FFmpeg | =0.3 | |
| FFmpeg FFmpeg | =0.3.1 | |
| FFmpeg FFmpeg | =0.3.2 | |
| FFmpeg FFmpeg | =0.3.3 | |
| FFmpeg FFmpeg | =0.3.4 | |
| FFmpeg FFmpeg | =0.4.0 | |
| FFmpeg FFmpeg | =0.4.2 | |
| FFmpeg FFmpeg | =0.4.3 | |
| FFmpeg FFmpeg | =0.4.4 | |
| FFmpeg FFmpeg | =0.4.5 | |
| FFmpeg FFmpeg | =0.4.6 | |
| FFmpeg FFmpeg | =0.4.7 | |
| FFmpeg FFmpeg | =0.4.8 | |
| FFmpeg FFmpeg | =0.4.9-pre1 | |
| FFmpeg FFmpeg | =0.5 | |
| Mplayerhq Mplayer | <=1.0 | |
| Mplayerhq Mplayer | =0.01 | |
| Mplayerhq Mplayer | =0.02 | |
| Mplayerhq Mplayer | =0.05 | |
| Mplayerhq Mplayer | =0.06 | |
| Mplayerhq Mplayer | =0.07 | |
| Mplayerhq Mplayer | =0.08 | |
| Mplayerhq Mplayer | =0.09 | |
| Mplayerhq Mplayer | =0.09-pre3 | |
| Mplayerhq Mplayer | =0.10 | |
| Mplayerhq Mplayer | =0.10-pre1 | |
| Mplayerhq Mplayer | =0.10-pre2 | |
| Mplayerhq Mplayer | =0.10-pre3 | |
| Mplayerhq Mplayer | =0.10-pre4 | |
| Mplayerhq Mplayer | =0.10-pre5 | |
| Mplayerhq Mplayer | =0.10-pre6 | |
| Mplayerhq Mplayer | =0.10-pre7 | |
| Mplayerhq Mplayer | =0.11-pre10 | |
| Mplayerhq Mplayer | =0.11-pre11 | |
| Mplayerhq Mplayer | =0.11-pre12 | |
| Mplayerhq Mplayer | =0.11-pre13 | |
| Mplayerhq Mplayer | =0.11-pre14 | |
| Mplayerhq Mplayer | =0.11-pre15 | |
| Mplayerhq Mplayer | =0.11-pre16 | |
| Mplayerhq Mplayer | =0.11-pre17 | |
| Mplayerhq Mplayer | =0.11-pre18 | |
| Mplayerhq Mplayer | =0.11-pre19 | |
| Mplayerhq Mplayer | =0.11-pre2 | |
| Mplayerhq Mplayer | =0.11-pre20 | |
| Mplayerhq Mplayer | =0.11-pre21 | |
| Mplayerhq Mplayer | =0.11-pre22 | |
| Mplayerhq Mplayer | =0.11-pre23 | |
| Mplayerhq Mplayer | =0.11-pre24 | |
| Mplayerhq Mplayer | =0.11-pre3 | |
| Mplayerhq Mplayer | =0.11-pre4 | |
| Mplayerhq Mplayer | =0.11-pre5 | |
| Mplayerhq Mplayer | =0.11-pre6 | |
| Mplayerhq Mplayer | =0.11-pre7 | |
| Mplayerhq Mplayer | =0.11-pre8 | |
| Mplayerhq Mplayer | =0.11-pre9 | |
| Mplayerhq Mplayer | =0.17_idegcounter | |
| Mplayerhq Mplayer | =0.17a_idegcounter | |
| Mplayerhq Mplayer | =0.18-pre1 | |
| Mplayerhq Mplayer | =0.18-pre2 | |
| Mplayerhq Mplayer | =0.18-pre3 | |
| Mplayerhq Mplayer | =0.18-pre4 | |
| Mplayerhq Mplayer | =0.18-pre5 | |
| Mplayerhq Mplayer | =0.50 | |
| Mplayerhq Mplayer | =0.50-pre1 | |
| Mplayerhq Mplayer | =0.50-pre2 | |
| Mplayerhq Mplayer | =0.50-pre3 | |
| Mplayerhq Mplayer | =0.60 | |
| Mplayerhq Mplayer | =0.60-pre1 | |
| Mplayerhq Mplayer | =0.60-pre2 | |
| Mplayerhq Mplayer | =0.90 | |
| Mplayerhq Mplayer | =0.90-pre1 | |
| Mplayerhq Mplayer | =0.90-pre10 | |
| Mplayerhq Mplayer | =0.90-pre2 | |
| Mplayerhq Mplayer | =0.90-pre3 | |
| Mplayerhq Mplayer | =0.90-pre4 | |
| Mplayerhq Mplayer | =0.90-pre5 | |
| Mplayerhq Mplayer | =0.90-pre6 | |
| Mplayerhq Mplayer | =0.90-pre7 | |
| Mplayerhq Mplayer | =0.90-pre8 | |
| Mplayerhq Mplayer | =0.90-pre9 | |
| Mplayerhq Mplayer | =0.90-rc1 | |
| Mplayerhq Mplayer | =0.90-rc2 | |
| Mplayerhq Mplayer | =0.90-rc3 | |
| Mplayerhq Mplayer | =0.90-rc3-pre1 | |
| Mplayerhq Mplayer | =0.90-rc3-pre2 | |
| Mplayerhq Mplayer | =0.90-rc3-pre3 | |
| Mplayerhq Mplayer | =0.90-rc4 | |
| Mplayerhq Mplayer | =0.90-rc5 | |
| Mplayerhq Mplayer | =0.91 | |
| Mplayerhq Mplayer | =0.92 | |
| Mplayerhq Mplayer | =0.92.1 | |
| Mplayerhq Mplayer | =0.93 | |
| Mplayerhq Mplayer | =1.0-pre1 | |
| Mplayerhq Mplayer | =1.0-pre2 | |
| Mplayerhq Mplayer | =1.0-pre3 | |
| Mplayerhq Mplayer | =1.0-pre3try2 | |
| Mplayerhq Mplayer | =1.0-pre4 | |
| Mplayerhq Mplayer | =1.0-pre5 | |
| Mplayerhq Mplayer | =1.0-pre5try2 | |
| Mplayerhq Mplayer | =1.0-pre6 | |
| Mplayerhq Mplayer | =1.0-pre6a | |
| Mplayerhq Mplayer | =1.0-pre7 | |
| Mplayerhq Mplayer | =1.0-pre7try2 | |
| Mplayerhq Mplayer | =1.0-pre8 | |
| Mplayerhq Mplayer | =1.0-rc1 | |
| Mplayerhq Mplayer | =1.0-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/41626
- http://www.vupen.com/english/advisories/2010/2517
- http://www.ocert.org/advisories/ocert-2010-004.html
- https://bugzilla.redhat.com/show_bug.cgi?id=635775
- http://www.openwall.com/lists/oss-security/2010/09/28/4
- http://git.ffmpeg.org/?p=ffmpeg;a=commit;h=16c592155f117ccd7b86006c45aacc692a81c23b
- http://www.vupen.com/english/advisories/2010/2518
- http://www.debian.org/security/2011/dsa-2165
- http://secunia.com/advisories/43323
- http://www.vupen.com/english/advisories/2011/1241
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
- http://www.ubuntu.com/usn/usn-1104-1/
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
- http://www.securityfocus.com/archive/1/514009/100/0/threaded
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=448516&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=448516&action=edit
- http://git.ffmpeg.org/?p=ffmpeg;a=commitdiff;h=16c592155f117ccd7b86006c45aacc692a81c23b
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=638265
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=635775#c6
- http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b
- collector/nvd-historical
- collector/redhat-bugzilla
- alias/CVE-2010-3429
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/references
- vendor/ffmpeg
- canonical/ffmpeg libavcodec
- canonical/ffmpeg ffmpeg
- version/ffmpeg ffmpeg/0.6
- version/ffmpeg ffmpeg/0.3
- version/ffmpeg ffmpeg/0.3.1
- version/ffmpeg ffmpeg/0.3.2
- version/ffmpeg ffmpeg/0.3.3
- version/ffmpeg ffmpeg/0.3.4
- version/ffmpeg ffmpeg/0.4.0
- version/ffmpeg ffmpeg/0.4.2
- version/ffmpeg ffmpeg/0.4.3
- version/ffmpeg ffmpeg/0.4.4
- version/ffmpeg ffmpeg/0.4.5
- version/ffmpeg ffmpeg/0.4.6
- version/ffmpeg ffmpeg/0.4.7
- version/ffmpeg ffmpeg/0.4.8
- version/ffmpeg ffmpeg/0.4.9-pre1
- version/ffmpeg ffmpeg/0.5
- vendor/mplayerhq
- canonical/mplayerhq mplayer
- version/mplayerhq mplayer/1.0
- version/mplayerhq mplayer/0.01
- version/mplayerhq mplayer/0.02
- version/mplayerhq mplayer/0.05
- version/mplayerhq mplayer/0.06
- version/mplayerhq mplayer/0.07
- version/mplayerhq mplayer/0.08
- version/mplayerhq mplayer/0.09
- version/mplayerhq mplayer/0.09-pre3
- version/mplayerhq mplayer/0.10
- version/mplayerhq mplayer/0.10-pre1
- version/mplayerhq mplayer/0.10-pre2
- version/mplayerhq mplayer/0.10-pre3
- version/mplayerhq mplayer/0.10-pre4
- version/mplayerhq mplayer/0.10-pre5
- version/mplayerhq mplayer/0.10-pre6
- version/mplayerhq mplayer/0.10-pre7
- version/mplayerhq mplayer/0.11-pre10
- version/mplayerhq mplayer/0.11-pre11
- version/mplayerhq mplayer/0.11-pre12
- version/mplayerhq mplayer/0.11-pre13
- version/mplayerhq mplayer/0.11-pre14
- version/mplayerhq mplayer/0.11-pre15
- version/mplayerhq mplayer/0.11-pre16
- version/mplayerhq mplayer/0.11-pre17
- version/mplayerhq mplayer/0.11-pre18
- version/mplayerhq mplayer/0.11-pre19
- version/mplayerhq mplayer/0.11-pre2
- version/mplayerhq mplayer/0.11-pre20
- version/mplayerhq mplayer/0.11-pre21
- version/mplayerhq mplayer/0.11-pre22
- version/mplayerhq mplayer/0.11-pre23
- version/mplayerhq mplayer/0.11-pre24
- version/mplayerhq mplayer/0.11-pre3
- version/mplayerhq mplayer/0.11-pre4
- version/mplayerhq mplayer/0.11-pre5
- version/mplayerhq mplayer/0.11-pre6
- version/mplayerhq mplayer/0.11-pre7
- version/mplayerhq mplayer/0.11-pre8
- version/mplayerhq mplayer/0.11-pre9
- version/mplayerhq mplayer/0.17_idegcounter
- version/mplayerhq mplayer/0.17a_idegcounter
- version/mplayerhq mplayer/0.18-pre1
- version/mplayerhq mplayer/0.18-pre2
- version/mplayerhq mplayer/0.18-pre3
- version/mplayerhq mplayer/0.18-pre4
- version/mplayerhq mplayer/0.18-pre5
- version/mplayerhq mplayer/0.50
- version/mplayerhq mplayer/0.50-pre1
- version/mplayerhq mplayer/0.50-pre2
- version/mplayerhq mplayer/0.50-pre3
- version/mplayerhq mplayer/0.60
- version/mplayerhq mplayer/0.60-pre1
- version/mplayerhq mplayer/0.60-pre2
- version/mplayerhq mplayer/0.90
- version/mplayerhq mplayer/0.90-pre1
- version/mplayerhq mplayer/0.90-pre10
- version/mplayerhq mplayer/0.90-pre2
- version/mplayerhq mplayer/0.90-pre3
- version/mplayerhq mplayer/0.90-pre4
- version/mplayerhq mplayer/0.90-pre5
- version/mplayerhq mplayer/0.90-pre6
- version/mplayerhq mplayer/0.90-pre7
- version/mplayerhq mplayer/0.90-pre8
- version/mplayerhq mplayer/0.90-pre9
- version/mplayerhq mplayer/0.90-rc1
- version/mplayerhq mplayer/0.90-rc2
- version/mplayerhq mplayer/0.90-rc3
- version/mplayerhq mplayer/0.90-rc3-pre1
- version/mplayerhq mplayer/0.90-rc3-pre2
- version/mplayerhq mplayer/0.90-rc3-pre3
- version/mplayerhq mplayer/0.90-rc4
- version/mplayerhq mplayer/0.90-rc5
- version/mplayerhq mplayer/0.91
- version/mplayerhq mplayer/0.92
- version/mplayerhq mplayer/0.92.1
- version/mplayerhq mplayer/0.93
- version/mplayerhq mplayer/1.0-pre1
- version/mplayerhq mplayer/1.0-pre2
- version/mplayerhq mplayer/1.0-pre3
- version/mplayerhq mplayer/1.0-pre3try2
- version/mplayerhq mplayer/1.0-pre4
- version/mplayerhq mplayer/1.0-pre5
- version/mplayerhq mplayer/1.0-pre5try2
- version/mplayerhq mplayer/1.0-pre6
- version/mplayerhq mplayer/1.0-pre6a
- version/mplayerhq mplayer/1.0-pre7
- version/mplayerhq mplayer/1.0-pre7try2
- version/mplayerhq mplayer/1.0-pre8
- version/mplayerhq mplayer/1.0-rc1
- version/mplayerhq mplayer/1.0-rc2