Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DSA-1004-1 | New vlc packages fix arbitrary code execution |
![]() |
DSA-1005-1 | New xine-lib packages fix arbitrary code execution |
![]() |
DSA-992-1 | New ffmpeg packages fix arbitrary code execution |
![]() |
EUVD-2005-4043 | Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes. |
![]() |
USN-230-1 | ffmpeg vulnerability |
![]() |
USN-230-2 | ffmpeg/xine-lib vulnerability |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T23:31:48.965Z
Reserved: 2005-12-07T00:00:00
Link: CVE-2005-4048

No data.

Status : Deferred
Published: 2005-12-07T11:03:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2005-4048

No data.

No data.