CVE-2006-4800
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers...
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
- Record
CVE-2006-4800- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
- Record
CVE-2006-4800- Updated
- 2026-11-02
EUVDEUVD-2006-4787 No score
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
- Record
EUVD-2006-4787- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4qm4-cvh9-rfwh No score
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers...
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
- Record
GHSA-4qm4-cvh9-rfwh- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
- Record
CVE-2006-4800- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4800 No score
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c. NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
- Record
DEBIAN-CVE-2006-4800- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ffmpegDebian:12 |
before 0.cvs20060329-1 | 0.cvs20060329-1 |
ffmpegDebian:13 |
before 0.cvs20060329-1 | 0.cvs20060329-1 |
ffmpegDebian:14 |
before 0.cvs20060329-1 | 0.cvs20060329-1 |
mplayerDebian:12 |
before 1.0~rc1-1 | 1.0~rc1-1 |
mplayerDebian:13 |
before 1.0~rc1-1 | 1.0~rc1-1 |
mplayerDebian:14 |
before 1.0~rc1-1 | 1.0~rc1-1 |
xine-libDebian:3.1 From an advisory covering 2 CVEs |
before 1.0.1-1sarge4, plus listed versions 1.0.1-11.0.1-1sarge11.0.1-1sarge21.0.1-1sarge3 |
1.0.1-1sarge4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4800 is a high vulnerability (CVSS 7.5) in Ffmpeg, published September 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.30%, the 92nd percentile. Fixed in ffmpeg 0.cvs20060329-1.
References
mandriva.com/security/advisories?name=MDKSA-2006:174
secunia.com/advisories/22181
novell.com/linux/security/advisories/2006_73_mono.html
securityfocus.com/bid/20009
Show 19 moreShow less
ubuntu.com/usn/usn-358-1
us.debian.org/security/2006/dsa-1215
bugs.gentoo.org/show_bug.cgi?id=133520
security.gentoo.org/glsa/glsa-200609-09.xml
nvd.nist.gov/vuln/detail/CVE-2006-4800
github.com/advisories/GHSA-4qm4-cvh9-rfwh
security-tracker.debian.org/tracker/CVE-2006-4800