--- title: "CVE-2006-4800\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2006-4800?format=md keywords: index, follow --- # CVE-2006-4800 Publication date 14 September 2006 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9\_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | ffmpeg | 7.04 feisty | Not affected | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Fixed 0.cvs20050918-5ubuntu1.1 | | gst-ffmpeg | 7.04 feisty | Fixed 0.8.7-10ubuntu1 | | 6.10 edgy | Ignored end of life, was needed | | 6.06 LTS dapper | Ignored end of life, was needed | | gstreamer0.10-ffmpeg | 7.04 feisty | Fixed 0.10.2-0ubuntu4 | | 6.10 edgy | Ignored end of life, was needed | | 6.06 LTS dapper | Ignored end of life, was needed | | kino | 7.04 feisty | Not affected | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Not affected | | xine-lib | 7.04 feisty | Not affected | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Not affected | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4800) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-4800) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-4800) * [Debian](https://security-tracker.debian.org/tracker/CVE-2006-4800) ### Related Ubuntu Security Notices (USN) + [USN-358-1](https://usn.ubuntu.com/USN-358-1) + ffmpeg, xine-lib vulnerabilities + 5 October 2006 ### Other references *