6.8

CVE-2010-3429: ffmpeg Code Injection

CVSS: 6.8v2.0MediumModified
AliasesDEBIAN-CVE-2010-3429CGA-5mq5-m3vh-x8f7CGA-xqr4-7g43-8x6g
Published 30-09-2010Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2010-3429 is a medium (CVSS 6.8) Code Injection vulnerability in ffmpeg. EPSS estimates a 4.18% chance of exploitation in the next 30 days, higher than 90.8% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
4.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 2
DSA-2165-1CGA-7535-4CV2-CRXXCGA-X9HC-556J-F3JJ

Timeline

  1. 30-09-2010
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

4.18%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.18% on 20-09-2026

20-09-202620-10-2026
EPSS score
4.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard1 product
  • ffmpegAll versions (No fix recorded)
Debian1 product
  • ffmpeg< 4:0.5.2-6
Ffmpeg1 product
  • ffmpegEOL≤ 0.6 | 0.3 | 0.3.1 | 0.3.2 | 0.3.3 | 0.3.4 | 0.4.0 | 0.4.2 | 0.4.3 | 0.4.4 | 0.4.5 | 0.4.6 | 0.4.7 | 0.4.8 | 0.4.9:pre1 | 0.5
Mplayerhq1 product
  • mplayer≤ 1.0 | 0.01 | 0.02 | 0.05 | 0.06 | 0.07 | 0.08 | 0.09 | 0.09:pre3 | 0.10 | 0.10:pre1 | 0.10:pre2 | 0.10:pre3 | 0.10:pre4 | 0.10:pre5 | 0.10:pre6 | 0.10:pre7 | 0.11:pre10 | 0.11:pre11 | 0.11:pre12 | 0.11:pre13 | 0.11:pre14 | 0.11:pre15 | 0.11:pre16 | 0.11:pre17 | 0.11:pre18 | 0.11:pre19 | 0.11:pre2 | 0.11:pre20 | 0.11:pre21 | 0.11:pre22 | 0.11:pre23 | 0.11:pre24 | 0.11:pre3 | 0.11:pre4 | 0.11:pre5 | 0.11:pre6 | 0.11:pre7 | 0.11:pre8 | 0.11:pre9 | 0.17_idegcounter | 0.17a_idegcounter | 0.18:pre1 | 0.18:pre2 | 0.18:pre3 | 0.18:pre4 | 0.18:pre5 | 0.50 | 0.50:pre1 | 0.50:pre2 | 0.50:pre3 | 0.60 | 0.60:pre1 | 0.60:pre2 | 0.90 | 0.90:pre1 | 0.90:pre10 | 0.90:pre2 | 0.90:pre3 | 0.90:pre4 | 0.90:pre5 | 0.90:pre6 | 0.90:pre7 | 0.90:pre8 | 0.90:pre9 | 0.90:rc1 | 0.90:rc2 | 0.90:rc3 | 0.90:rc3-pre1 | 0.90:rc3-pre2 | 0.90:rc3-pre3 | 0.90:rc4 | 0.90:rc5 | 0.91 | 0.92 | 0.92.1 | 0.93 | 1.0:pre1 | 1.0:pre2 | 1.0:pre3 | 1.0:pre3try2 | 1.0:pre4 | 1.0:pre5 | 1.0:pre5try2 | 1.0:pre6 | 1.0:pre6a | 1.0:pre7 | 1.0:pre7try2 | 1.0:pre8 | 1.0:rc1 | 1.0:rc2
Wolfi1 product
  • ffmpegAll versions (No fix recorded)

5 vendors · 5 products

References

20 links
Show all 20 references