CVE-2009-4638 - Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors

MEDIUM

Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors

Published Feb 10, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 3.90%

Integer overflow in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

No remediation recorded yet.

Weaknesses (1)

CWE-189

Link	Providers	Tags
http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html		x_refsource_MISCExploit
http://secunia.com/advisories/36805		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/38643		third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2010/dsa-2000		vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/36465		vdb-entryx_refsource_BID
https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240		x_refsource_MISC

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 10, 2010

Updated Aug 7, 2024

Reserved Feb 9, 2010

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a