CVE-2010-3429
N/A
Published: September 30, 2010 at 02:00 PM UTC
Updated: June 16, 2026 at 11:22 PM UTC
3 products affected across 2 vendorsFFMPEGMplayerLibavcodec
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
All versions
v ≤ 1.00.010.020.050.060.070.080.090.09 pre30.100.10 pre10.10 pre20.10 pre30.10 pre40.10 pre50.10 pre60.10 pre70.11 pre100.11 pre110.11 pre120.11 pre130.11 pre140.11 pre150.11 pre160.11 pre170.11 pre180.11 pre190.11 pre20.11 pre200.11 pre210.11 pre220.11 pre230.11 pre240.11 pre30.11 pre40.11 pre50.11 pre60.11 pre70.11 pre80.11 pre90.17_idegcounter0.17a_idegcounter0.18 pre10.18 pre20.18 pre30.18 pre40.18 pre50.500.50 pre10.50 pre20.50 pre30.600.60 pre10.60 pre20.900.90 pre10.90 pre100.90 pre20.90 pre30.90 pre40.90 pre50.90 pre60.90 pre70.90 pre80.90 pre90.90 rc10.90 rc20.90 rc30.90 rc3-pre10.90 rc3-pre20.90 rc3-pre30.90 rc40.90 rc50.910.920.92.10.931.0 pre11.0 pre21.0 pre31.0 pre3try21.0 pre41.0 pre51.0 pre5try21.0 pre61.0 pre6a1.0 pre71.0 pre7try21.0 pre81.0 rc11.0 rc2rc3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (19)
x_refsource_CONFIRM
Source: [email protected]
http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23bThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/41626Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2011/dsa-2165Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2011:060Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2011:061Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2011:062Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2011:088Quick Info
StatusMODIFIED
CWE
CWE-94
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card