CVE-2010-3429
Fixed in a distro release EPSS 4%
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Products: ffmpeg libavcodec, ffmpeg, mplayerhq mplayer
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | ffmpeg | 0 |
| Debian 12 | ffmpeg | 4:0.5.2-6 |
| Debian 13 | ffmpeg | 4:0.5.2-6 |
| Debian 14 | ffmpeg | 4:0.5.2-6 |
| Debian 5.0 | ffmpeg-debian | 0.svn20080206-18+lenny3 |
| Wolfi | ffmpeg | 0 |