CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
References
Link Resource
http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b
http://secunia.com/advisories/41626 Vendor Advisory
http://secunia.com/advisories/43323
http://www.debian.org/security/2011/dsa-2165
http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
http://www.ocert.org/advisories/ocert-2010-004.html
http://www.openwall.com/lists/oss-security/2010/09/28/4
http://www.securityfocus.com/archive/1/514009/100/0/threaded
http://www.ubuntu.com/usn/usn-1104-1/
http://www.vupen.com/english/advisories/2010/2517 Patch Vendor Advisory
http://www.vupen.com/english/advisories/2010/2518 Vendor Advisory
http://www.vupen.com/english/advisories/2011/1241
https://bugzilla.redhat.com/show_bug.cgi?id=635775
http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b
http://secunia.com/advisories/41626 Vendor Advisory
http://secunia.com/advisories/43323
http://www.debian.org/security/2011/dsa-2165
http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
http://www.mandriva.com/security/advisories?name=MDVSA-2011:061
http://www.mandriva.com/security/advisories?name=MDVSA-2011:062
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088
http://www.mandriva.com/security/advisories?name=MDVSA-2011:089
http://www.mandriva.com/security/advisories?name=MDVSA-2011:112
http://www.mandriva.com/security/advisories?name=MDVSA-2011:114
http://www.ocert.org/advisories/ocert-2010-004.html
http://www.openwall.com/lists/oss-security/2010/09/28/4
http://www.securityfocus.com/archive/1/514009/100/0/threaded
http://www.ubuntu.com/usn/usn-1104-1/
http://www.vupen.com/english/advisories/2010/2517 Patch Vendor Advisory
http://www.vupen.com/english/advisories/2010/2518 Vendor Advisory
http://www.vupen.com/english/advisories/2011/1241
https://bugzilla.redhat.com/show_bug.cgi?id=635775
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ffmpeg:libavcodec:*:*:*:*:*:*:*:*
OR cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:ffmpeg:libavcodec:*:*:*:*:*:*:*:*
OR cpe:2.3:a:mplayerhq:mplayer:*:rc3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.01:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.02:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.05:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.06:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.07:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.08:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.09:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.09:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre10:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre11:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre12:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre13:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre14:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre15:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre16:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre17:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre18:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre19:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre20:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre21:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre22:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre23:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre24:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre8:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre9:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.17_idegcounter:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.17a_idegcounter:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.60:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.60:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.60:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre10:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre8:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre9:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3-pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3-pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3-pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.91:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.92:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.92.1:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.93:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre3try2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre5try2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre6a:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre7try2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre8:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:rc2:*:*:*:*:*:*

History

21 Nov 2024, 01:18

Type Values Removed Values Added
References () http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b - () http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b -
References () http://secunia.com/advisories/41626 - Vendor Advisory () http://secunia.com/advisories/41626 - Vendor Advisory
References () http://secunia.com/advisories/43323 - () http://secunia.com/advisories/43323 -
References () http://www.debian.org/security/2011/dsa-2165 - () http://www.debian.org/security/2011/dsa-2165 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:060 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:060 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:088 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:088 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:112 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:112 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:114 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:114 -
References () http://www.ocert.org/advisories/ocert-2010-004.html - () http://www.ocert.org/advisories/ocert-2010-004.html -
References () http://www.openwall.com/lists/oss-security/2010/09/28/4 - () http://www.openwall.com/lists/oss-security/2010/09/28/4 -
References () http://www.securityfocus.com/archive/1/514009/100/0/threaded - () http://www.securityfocus.com/archive/1/514009/100/0/threaded -
References () http://www.ubuntu.com/usn/usn-1104-1/ - () http://www.ubuntu.com/usn/usn-1104-1/ -
References () http://www.vupen.com/english/advisories/2010/2517 - Patch, Vendor Advisory () http://www.vupen.com/english/advisories/2010/2517 - Patch, Vendor Advisory
References () http://www.vupen.com/english/advisories/2010/2518 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/2518 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/1241 - () http://www.vupen.com/english/advisories/2011/1241 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=635775 - () https://bugzilla.redhat.com/show_bug.cgi?id=635775 -

07 Nov 2023, 02:05

Type Values Removed Values Added
References
  • {'url': 'http://git.ffmpeg.org/?p=ffmpeg;a=commit;h=16c592155f117ccd7b86006c45aacc692a81c23b', 'name': 'http://git.ffmpeg.org/?p=ffmpeg;a=commit;h=16c592155f117ccd7b86006c45aacc692a81c23b', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • () http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b -

Information

Published : 2010-09-30 15:00

Updated : 2024-11-21 01:18


NVD link : CVE-2010-3429

Mitre link : CVE-2010-3429

CVE.ORG link : CVE-2010-3429


JSON object : View

Products Affected

mplayerhq

  • mplayer

ffmpeg

  • libavcodec
  • ffmpeg
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')