FFmpeg LibAVCodec Heap Buffer Overflow Vulnerability

Bugtraq ID:	15743
Class:	Boundary Condition Error
CVE:	CVE-2005-4048
Remote:	Yes
Local:	No
Published:	Dec 06 2005 12:00AM
Updated:	Jan 04 2007 06:27PM
Credit:	Simon Kilvington <s.kilvington@eris.qinetiq.com> disclosed this issue to the vendor.
Vulnerable:	VLC VLC 0.8.5 VLC VLC 0.8.4 VLC VLC 0.8.1 Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Slackware Linux 10.2 Slackware Linux -current Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux FFmpeg FFmpeg 0.8.7 FFmpeg FFmpeg 0.4.9 -pre1 FFmpeg FFmpeg 0.4.8 FFmpeg FFmpeg 0.4.7 FFmpeg FFmpeg 0.4.6 FFmpeg FFmpeg CVS + Ubuntu Ubuntu Linux 5.0 4 powerpc + Ubuntu Ubuntu Linux 5.0 4 i386 + Ubuntu Ubuntu Linux 5.0 4 amd64 FFmpeg FFmpeg 2005-03-13 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1

Not Vulnerable:	FFmpeg FFmpeg 0.8.7 -r1