Vulnerability Details CVE-2008-4868
Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.8%
CVSS Severity
CVSS v2 Score 10.0
References
- http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html
- http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016136.html
- http://secunia.com/advisories/34385
- http://security.gentoo.org/glsa/glsa-200903-33.xml
- http://www.openwall.com/lists/oss-security/2008/10/29/6
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46325
- http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0103.html
- http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016136.html
- http://secunia.com/advisories/34385
- http://security.gentoo.org/glsa/glsa-200903-33.xml
- http://www.openwall.com/lists/oss-security/2008/10/29/6
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46325
Products affected by CVE-2008-4868
-
cpe:2.3:a:ffmpeg:ffmpeg:0.3
-
cpe:2.3:a:ffmpeg:ffmpeg:0.3.1
-
cpe:2.3:a:ffmpeg:ffmpeg:0.3.2
-
cpe:2.3:a:ffmpeg:ffmpeg:0.3.3
-
cpe:2.3:a:ffmpeg:ffmpeg:0.3.4
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.0
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.2
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.3
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.4
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.5
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.6
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.7
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.8
-
cpe:2.3:a:ffmpeg:ffmpeg:0.4.9
-
cpe:2.3:a:mplayer:mplayer:*