CVE-2005-4048
CVSS 7.5 - HIGH
Description
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
Affected Products
5| Vendor | Product | Version |
|---|---|---|
| ffmpeg | ffmpeg |
0.4.6
|
| ffmpeg | ffmpeg |
0.4.7
|
| ffmpeg | ffmpeg |
0.4.8
|
| ffmpeg | ffmpeg |
0.4.9
|
| ffmpeg | ffmpeg |
cvs
|
References
Weakness Types
CWE-119
CVE Information
- CVE ID:
CVE-2005-4048- Published:
- 2005-12-07
- Modified:
- 2026-04-16
- CVSS Score:
- 7.5
- Severity:
- HIGH
- Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Vendors
ffmpeg
Quick Actions
CVSS Severity Scale
0.0 - 3.9
LOW
4.0 - 6.9
MEDIUM
7.0 - 8.9
HIGH
9.0 - 10.0
CRITICAL