UnratedFix available
ffmpeg, mplayer — security advisory
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
- Products
- ffmpeg, mplayer
- Affected versions
- Not specified
- Fixed versions
- 0.cvs20060329-1, 1.0~rc1-1
- CVEs
- CVE-2006-4800
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 20:14 UTC · Revision 1
Source evidence
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
osv:DEBIAN-CVE-2006-4800
ffmpeg
Fixed versions: 0.cvs20060329-1
ffmpeg
Fixed versions: 0.cvs20060329-1
ffmpeg
Fixed versions: 0.cvs20060329-1
mplayer
Fixed versions: 1.0~rc1-1
mplayer
Fixed versions: 1.0~rc1-1
mplayer
Fixed versions: 1.0~rc1-1
Complete source record
{
"id": "4f99209571fc62b6c346add3b66e8461629f981eacd68c8db3fd86f0ec1d08ef",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2006-4800",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2006-4800",
"summary": "Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.",
"evidence": "osv:DEBIAN-CVE-2006-4800",
"products": [
{
"name": {
"value": "ffmpeg",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.cvs20060329-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ffmpeg",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.cvs20060329-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ffmpeg",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.cvs20060329-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mplayer",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.0~rc1-1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mplayer",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.0~rc1-1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mplayer",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.0~rc1-1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2006-4800",
"aliases": [
"DEBIAN-CVE-2006-4800"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.cvs20060329-1"
}
]
}
],
"package": {
"name": "ffmpeg",
"purl": "pkg:deb/debian/ffmpeg?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4800.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.cvs20060329-1"
}
]
}
],
"package": {
"name": "ffmpeg",
"purl": "pkg:deb/debian/ffmpeg?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4800.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.cvs20060329-1"
}
]
}
],
"package": {
"name": "ffmpeg",
"purl": "pkg:deb/debian/ffmpeg?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4800.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0~rc1-1"
}
]
}
],
"package": {
"name": "mplayer",
"purl": "pkg:deb/debian/mplayer?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4800.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0~rc1-1"
}
]
}
],
"package": {
"name": "mplayer",
"purl": "pkg:deb/debian/mplayer?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4800.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0~rc1-1"
}
]
}
],
"package": {
"name": "mplayer",
"purl": "pkg:deb/debian/mplayer?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4800.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-22T23:47:26.128626127Z",
"provider": "osv",
"upstream": [
"CVE-2006-4800"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2006-4800"
]
},
"related_cves": [
{
"value": "CVE-2006-4800",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410528,
"published_at": "2006-09-14T22:07:00+00:00"
}