CVE-2010-3429

Publication date 30 September 2010

Last updated 24 July 2024

Ubuntu priority

Description

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."

Status

Show unmaintained releases

Package	Ubuntu Release	Status
ffmpeg	10.10 maverick	Fixed 4:0.6-2ubuntu5
	10.04 LTS lucid	Fixed 4:0.5.1-1ubuntu1.1
	9.10 karmic	Fixed 4:0.5+svn20090706-2ubuntu2.3
	9.04 jaunty	Ignored end of life
	8.04 LTS hardy	Fixed 3:0.cvs20070307-5ubuntu7.6
	6.06 LTS dapper	Ignored end of life
ffmpeg-debian	10.10 maverick	Not in release
	10.04 LTS lucid	Not in release
	9.10 karmic	Not in release
	9.04 jaunty	Ignored end of life
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
ffmpeg	Upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=2f504d7a90605b77d1a9ac43a8d1efa208e0f515 Upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=79a16f0cac9a7251c7849923a25ddb048b5ce5f6 Upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=6e73cef6e3b536fbccdb82bd9260440d836b3f03

References

Related Ubuntu Security Notices (USN)

USN-1104-1
FFmpeg vulnerabilities
4 April 2011