CVE-2010-3429

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ffmpeg:libavcodec:*:*:*:*:*:*:*:*
OR cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:pre1:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:ffmpeg:libavcodec:*:*:*:*:*:*:*:*
OR cpe:2.3:a:mplayerhq:mplayer:*:rc3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.01:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.02:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.05:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.06:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.07:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.08:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.09:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.09:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.10:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre10:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre11:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre12:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre13:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre14:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre15:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre16:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre17:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre18:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre19:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre20:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre21:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre22:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre23:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre24:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre8:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.11:pre9:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.17_idegcounter:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.17a_idegcounter:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.18:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.50:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.60:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.60:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.60:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre10:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre8:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:pre9:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3-pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3-pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc3-pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.90:rc5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.91:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.92:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.92.1:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:0.93:*:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre3:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre3try2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre4:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre5:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre5try2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre6:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre6a:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre7:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre7try2:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:pre8:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mplayerhq:mplayer:1.0:rc2:*:*:*:*:*:*

History

07 Nov 2023, 02:05

Type Values Removed Values Added
References
  • {'url': 'http://git.ffmpeg.org/?p=ffmpeg;a=commit;h=16c592155f117ccd7b86006c45aacc692a81c23b', 'name': 'http://git.ffmpeg.org/?p=ffmpeg;a=commit;h=16c592155f117ccd7b86006c45aacc692a81c23b', 'tags': ['Patch'], 'refsource': 'CONFIRM'}
  • () http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b -

Information

Published : 2010-09-30 15:00

Updated : 2023-12-10 11:03


NVD link : CVE-2010-3429

Mitre link : CVE-2010-3429

CVE.ORG link : CVE-2010-3429


JSON object : View

Products Affected

mplayerhq

  • mplayer

ffmpeg

  • ffmpeg
  • libavcodec
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')