CVE-2010-3429
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products,...
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
Exploit likelihood
What each source reports
NVD Score used
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
- Record
CVE-2010-3429- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
- Record
CVE-2010-3429- Updated
- 2026-11-02
EUVDEUVD-2010-3427No score
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
- Record
EUVD-2010-3427- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v73j-5247-67hgNo score
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products,...
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
- Record
GHSA-v73j-5247-67hg- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVNo score
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
- Record
CVE-2010-3429- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3429No score
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."
- Record
DEBIAN-CVE-2010-3429- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ffmpegDebian:12 | before 4:0.5.2-6 | 4:0.5.2-6 |
ffmpegDebian:13 | before 4:0.5.2-6 | 4:0.5.2-6 |
ffmpegDebian:14 | before 4:0.5.2-6 | 4:0.5.2-6 |
ffmpeg-debianDebian:5.0 From an advisory covering 3 CVEs | before 0.svn20080206-18+lenny3, plus listed versions 0.svn20080206-160.svn20080206-170.svn20080206-17+lenny10.svn20080206-180.svn20080206-18+lenny1 | 0.svn20080206-18+lenny3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3429 is a medium vulnerability (CVSS 6.8) in Ffmpeg, published September 30, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.18%, the 91st percentile. Fixed in ffmpeg 4:0.5.2-6.
References
mandriva.com/security/advisories?name=MDVSA-2011:088
openwall.com/lists/oss-security/2010/09/28/4
git.ffmpeg.org?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b
securityfocus.com/archive/1/514009/100/0/threaded
Show 17 moreShow less
secunia.com/advisories/43323
ubuntu.com/usn/usn-1104-1
vupen.com/english/advisories/2010/2518
debian.org/security/2011/dsa-2165
bugzilla.redhat.com/show_bug.cgi?id=635775
ocert.org/advisories/ocert-2010-004.html
nvd.nist.gov/vuln/detail/CVE-2010-3429
github.com/advisories/GHSA-v73j-5247-67hg
security-tracker.debian.org/tracker/CVE-2010-3429