medium
6.8
CWE
94
Advisory Published
CVE Published
Updated

CVE-2010-3429: Code Injection

First published: Mon Sep 20 2010(Updated: )

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
libavcodec
FFmpeg<=0.6
FFmpeg=0.3
FFmpeg=0.3.1
FFmpeg=0.3.2
FFmpeg=0.3.3
FFmpeg=0.3.4
FFmpeg=0.4.0
FFmpeg=0.4.2
FFmpeg=0.4.3
FFmpeg=0.4.4
FFmpeg=0.4.5
FFmpeg=0.4.6
FFmpeg=0.4.7
FFmpeg=0.4.8
FFmpeg=0.4.9-pre1
FFmpeg=0.5
Gapless Player SimZip<=1.0
Gapless Player SimZip=0.01
Gapless Player SimZip=0.02
Gapless Player SimZip=0.05
Gapless Player SimZip=0.06
Gapless Player SimZip=0.07
Gapless Player SimZip=0.08
Gapless Player SimZip=0.09
Gapless Player SimZip=0.09-pre3
Gapless Player SimZip=0.10
Gapless Player SimZip=0.10-pre1
Gapless Player SimZip=0.10-pre2
Gapless Player SimZip=0.10-pre3
Gapless Player SimZip=0.10-pre4
Gapless Player SimZip=0.10-pre5
Gapless Player SimZip=0.10-pre6
Gapless Player SimZip=0.10-pre7
Gapless Player SimZip=0.11-pre10
Gapless Player SimZip=0.11-pre11
Gapless Player SimZip=0.11-pre12
Gapless Player SimZip=0.11-pre13
Gapless Player SimZip=0.11-pre14
Gapless Player SimZip=0.11-pre15
Gapless Player SimZip=0.11-pre16
Gapless Player SimZip=0.11-pre17
Gapless Player SimZip=0.11-pre18
Gapless Player SimZip=0.11-pre19
Gapless Player SimZip=0.11-pre2
Gapless Player SimZip=0.11-pre20
Gapless Player SimZip=0.11-pre21
Gapless Player SimZip=0.11-pre22
Gapless Player SimZip=0.11-pre23
Gapless Player SimZip=0.11-pre24
Gapless Player SimZip=0.11-pre3
Gapless Player SimZip=0.11-pre4
Gapless Player SimZip=0.11-pre5
Gapless Player SimZip=0.11-pre6
Gapless Player SimZip=0.11-pre7
Gapless Player SimZip=0.11-pre8
Gapless Player SimZip=0.11-pre9
Gapless Player SimZip=0.17_idegcounter
Gapless Player SimZip=0.17a_idegcounter
Gapless Player SimZip=0.18-pre1
Gapless Player SimZip=0.18-pre2
Gapless Player SimZip=0.18-pre3
Gapless Player SimZip=0.18-pre4
Gapless Player SimZip=0.18-pre5
Gapless Player SimZip=0.50
Gapless Player SimZip=0.50-pre1
Gapless Player SimZip=0.50-pre2
Gapless Player SimZip=0.50-pre3
Gapless Player SimZip=0.60
Gapless Player SimZip=0.60-pre1
Gapless Player SimZip=0.60-pre2
Gapless Player SimZip=0.90
Gapless Player SimZip=0.90-pre1
Gapless Player SimZip=0.90-pre10
Gapless Player SimZip=0.90-pre2
Gapless Player SimZip=0.90-pre3
Gapless Player SimZip=0.90-pre4
Gapless Player SimZip=0.90-pre5
Gapless Player SimZip=0.90-pre6
Gapless Player SimZip=0.90-pre7
Gapless Player SimZip=0.90-pre8
Gapless Player SimZip=0.90-pre9
Gapless Player SimZip=0.90-rc1
Gapless Player SimZip=0.90-rc2
Gapless Player SimZip=0.90-rc3
Gapless Player SimZip=0.90-rc3-pre1
Gapless Player SimZip=0.90-rc3-pre2
Gapless Player SimZip=0.90-rc3-pre3
Gapless Player SimZip=0.90-rc4
Gapless Player SimZip=0.90-rc5
Gapless Player SimZip=0.91
Gapless Player SimZip=0.92
Gapless Player SimZip=0.92.1
Gapless Player SimZip=0.93
Gapless Player SimZip=1.0-pre1
Gapless Player SimZip=1.0-pre2
Gapless Player SimZip=1.0-pre3
Gapless Player SimZip=1.0-pre3try2
Gapless Player SimZip=1.0-pre4
Gapless Player SimZip=1.0-pre5
Gapless Player SimZip=1.0-pre5try2
Gapless Player SimZip=1.0-pre6
Gapless Player SimZip=1.0-pre6a
Gapless Player SimZip=1.0-pre7
Gapless Player SimZip=1.0-pre7try2
Gapless Player SimZip=1.0-pre8
Gapless Player SimZip=1.0-rc1
Gapless Player SimZip=1.0-rc2

Remedy

http://git.ffmpeg.org/?p=ffmpeg;a=commit;h=16c592155f117ccd7b86006c45aacc692a81c23b

Remedy

http://www.vupen.com/english/advisories/2010/2517

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2010-3429?

    CVE-2010-3429 is considered a critical vulnerability due to its potential for arbitrary code execution.

  • How do I fix CVE-2010-3429?

    To fix CVE-2010-3429, upgrade to a version of FFmpeg or libavcodec that is later than 0.6.

  • What products are affected by CVE-2010-3429?

    CVE-2010-3429 affects FFmpeg versions up to 0.6, and the libavcodec library used in MPlayer and other applications.

  • What kind of attack can exploit CVE-2010-3429?

    CVE-2010-3429 can be exploited by remote attackers through crafted Flic files leading to arbitrary code execution.

  • Is CVE-2010-3429 still relevant today?

    Though it was reported in 2010, CVE-2010-3429 may still be relevant for systems running outdated versions of affected software.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203