CVE-2005-4048

NameCVE-2005-4048
DescriptionHeap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-1004-1, DSA-1005-1, DSA-992-1
NVD severityhigh (attack range: remote)
Debian Bugs342207, 342208, 343503

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ffmpeg (PTS)stretch7:3.2.7-1~deb9u1fixed
stretch (security)7:3.2.8-1~deb9u1fixed
buster, sid7:3.4-3fixed
mplayer (PTS)wheezy2:1.0~rc4.dfsg1+svn34540-1+deb7u1fixed
wheezy (security)2:1.0~rc4.dfsg1+svn34540-1+deb7u2fixed
stretch2:1.3.0-6fixed
buster, sid2:1.3.0-7fixed
vlc (PTS)wheezy, wheezy (security)2.0.3-5+deb7u2fixed
jessie2.2.6-1~deb8u1fixed
jessie (security)2.2.7-1~deb8u1fixed
stretch2.2.6-1~deb9u1fixed
stretch (security)2.2.7-1~deb9u1fixed
buster2.2.7-1fixed
sid2.2.8-1fixed
xine-lib (PTS)wheezy1.1.21-1+deb7u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ffmpegsource(unstable)0.cvs20050918-5.1medium342207
ffmpegsourcesarge0.cvs20050313-2sarge1highDSA-992-1
gst-ffmpegsource(unstable)0.8.7-5medium343503
mplayersource(unstable)(not affected)
vlcsource(unstable)0.8.4.debian-2medium
vlcsourcesarge0.8.1.svn20050314-1sarge1highDSA-1004-1
vlcsourcewoody(not affected)DSA-1004-1
xine-libsource(unstable)1.0.1-1.5medium342208
xine-libsourcesarge1.0.1-1sarge2highDSA-1005-1
xine-libsourcewoody(not affected)DSA-1005-1
xmoviesource(unstable)(unfixed)high

Notes

- mplayer <not-affected> (Fixed before initial upload)
kino, smilutils, motion and vlc link statically against libavcodec, need a recompile once ffmpeg is fixed
smilutils, motion, kino link statically against libavcodec, but don't use the vulnerable function

Search for package or bug name: Reporting problems