CVE-2008-4869

Publication date 1 November 2008

Last updated 24 July 2024

Description

FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) via unknown vectors, aka a "Tcp/udp memory leak."

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
ffmpeg	9.10 karmic	Ignored
	9.04 jaunty	Ignored
	8.10 intrepid	Ignored
	8.04 LTS hardy	Ignored
	7.10 gutsy	Ignored end of life, was needed
	6.06 LTS dapper	Ignored end of life
mplayer	9.10 karmic	Ignored
	9.04 jaunty	Ignored
	8.10 intrepid	Ignored
	8.04 LTS hardy	Ignored
	7.10 gutsy	Ignored end of life, was needed
	6.06 LTS dapper	Ignored end of life

Notes

mdeslaur

not a security issue, ignoring

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
ffmpeg	Upstream: http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016011.html Upstream: http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016352.html Upstream: http://lists.mplayerhq.hu/pipermail/ffmpeg-cvslog/2008-August/016136.html