Your submission was sent successfully! Close

CVE-2005-4048

Published: 7 December 2005

Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.

Priority

Medium

Status

Package Release Status
ffmpeg
Launchpad, Ubuntu, Debian
dapper
Released (3:0.cvs20050918-5ubuntu1.2)
edgy
Released (0.cvs20060823-3.1ubuntu1)
feisty
Released (0.cvs20060823-3.1ubuntu1)
gutsy
Released (0.cvs20060823-3.1ubuntu1)
hardy
Released (0.cvs20060823-3.1ubuntu1)
intrepid Not vulnerable

jaunty Not vulnerable

karmic Not vulnerable

upstream Needs triage

gst-ffmpeg
Launchpad, Ubuntu, Debian
dapper
Released (0.8.7-5ubuntu1)
edgy
Released (0.8.7-5ubuntu1)
feisty
Released (0.8.7-5ubuntu1)
gutsy Does not exist

hardy Does not exist

intrepid Does not exist

jaunty Does not exist

karmic Does not exist

upstream Needs triage

gstreamer0.10-ffmpeg
Launchpad, Ubuntu, Debian
dapper
Released (0.10.1-0ubuntu2)
edgy
Released (0.10.1-0ubuntu2)
feisty
Released (0.10.1-0ubuntu2)
gutsy
Released (0.10.1-0ubuntu2)
hardy
Released (0.10.1-0ubuntu2)
intrepid
Released (0.10.1-0ubuntu2)
jaunty
Released (0.10.1-0ubuntu2)
karmic
Released (0.10.1-0ubuntu2)
upstream Needs triage

kino
Launchpad, Ubuntu, Debian
dapper Not vulnerable

edgy Not vulnerable

feisty Not vulnerable

gutsy Not vulnerable

hardy Not vulnerable

intrepid Not vulnerable

jaunty Not vulnerable

karmic Not vulnerable

upstream Needs triage

vlc
Launchpad, Ubuntu, Debian
dapper Ignored
(reached end-of-life)
edgy
Released (0.8.6-svn20061012.debian-1ubuntu1.1)
feisty
Released (0.8.6.release-0ubuntu4)
gutsy
Released (0.8.6.release-0ubuntu4)
hardy
Released (0.8.6.release-0ubuntu4)
intrepid
Released (0.8.6.release-0ubuntu4)
jaunty
Released (0.8.6.release-0ubuntu4)
karmic
Released (0.8.6.release-0ubuntu4)
upstream Needs triage

xine-extracodecs
Launchpad, Ubuntu, Debian
dapper
Released (1.1.1+ubuntu1-2)
edgy
Released (1.1.1+ubuntu1-2)
feisty
Released (1.1.1+ubuntu1-2)
gutsy Does not exist

hardy Does not exist

intrepid Does not exist

jaunty Does not exist

karmic Does not exist

upstream Needs triage

xine-lib
Launchpad, Ubuntu, Debian
dapper
Released (1.1.1+ubuntu2-7.7)
edgy
Released (1.1.2+repacked1-0ubuntu3.4)
feisty
Released (1.1.4-2ubuntu3)
gutsy
Released (1.1.4-2ubuntu3)
hardy
Released (1.1.4-2ubuntu3)
intrepid
Released (1.1.4-2ubuntu3)
jaunty
Released (1.1.4-2ubuntu3)
karmic
Released (1.1.4-2ubuntu3)
upstream Needs triage