Heap-based buffer overflow in FFmpeg - CVE-2005-4048

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU110558

Heap-based buffer overflow in FFmpeg - CVE-2005-4048

Published: December 7, 2005 / Updated: June 8, 2025


Vulnerability identifier: #VU110558
CSH Severity: Medium
CVSS v4.0:
CVE-ID: CVE-2005-4048
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: ffmpeg.sourceforge.net
Affected software:
FFmpeg

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer,. A remote attacker can use small PNG images with palettes. to trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


How to mitigate CVE-2005-4048

Install update from vendor's website.

Sources