NetSight
medium6.8

CVE-2010-3908

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or p…

Impact

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file.

Affected products

VendorProductAffected versions
FfmpegFfmpeg
through 0.5.3
Versions 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4
MplayerhqMplayer
All versions

Weakness classification

References