Buffer overflow in Ffmpeg

CVE-2009-4637

FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.

Vulnerability class: Buffer Overflow

EPSS: 0.170 (96.8th percentile) — read the EPSS interpretation.

Affected products

  • Ffmpeg — versions 0.5
  • N/a — versions n/a

Weakness classification (CWE)

References