CVE-2005-4048
ffmpeg - buffer overflow
EPSS 5.2%
Description
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
How to fix CVE-2005-4048
To remediate CVE-2005-4048, upgrade the affected package to a fixed version below.
- Debian/ffmpeg—upgrade to 0.cvs20050918-5.1 or later
- Debian/ffmpeg—upgrade to 0.cvs20050313-2sarge1 or later
- —upgrade to 0.8.4.debian-2 or later
- —upgrade to 0.8.1.svn20050314-1sarge1 or later
- —upgrade to 1.0.1-1sarge2 or later
Is CVE-2005-4048 being exploited?
Moderate — EPSS is 5.2%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (5)
- from 0, < 0.cvs20050918-5.1
- from 0, < 0.cvs20050313-2sarge1
- from 0, < 0.8.4.debian-2
- from 0, < 0.8.1.svn20050314-1sarge1
- from 0, < 1.0.1-1sarge2