{"api_version":"1","generated_at":"2026-07-23T13:21:47+00:00","cve":"CVE-2006-4800","urls":{"html":"https://cve.report/CVE-2006-4800","api":"https://cve.report/api/cve/CVE-2006-4800.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4800","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4800"},"summary":{"title":"CVE-2006-4800","description":"Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c.  NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-14 22:07:00","updated_at":"2018-10-30 16:25:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://secunia.com/advisories/23010","name":"23010","refsource":"SECUNIA","tags":[],"title":"Debian update for xine-lib - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21921","name":"21921","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Gentoo update for ffmpeg - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22200","name":"22200","refsource":"SECUNIA","tags":[],"title":"Mandriva update for xine-lib - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_73_mono.html","name":"SUSE-SA:2006:073","refsource":"SUSE","tags":[],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.us.debian.org/security/2006/dsa-1215","name":"DSA-1215","refsource":"DEBIAN","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://secunia.com/advisories/22201","name":"22201","refsource":"SECUNIA","tags":[],"title":"Mandriva update for mplayer - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:175","name":"MDKSA-2006:175","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:174","name":"MDKSA-2006:174","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22182","name":"22182","refsource":"SECUNIA","tags":[],"title":"MPlayer FFmpeg Multiple Buffer Overflow Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=133520","name":"http://bugs.gentoo.org/show_bug.cgi?id=133520","refsource":"MISC","tags":[],"title":"Gentoo Bug 133520 - {media-video/ffmpeg|media-libs/xine-lib} multiple issues (CVE-200{5-4048|6-2802})","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:176","name":"MDKSA-2006:176","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22180","name":"22180","refsource":"SECUNIA","tags":[],"title":"FFmpeg Multiple Buffer Overflow Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22203","name":"22203","refsource":"SECUNIA","tags":[],"title":"Mandriva update for gstreamer-ffmpeg - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22202","name":"22202","refsource":"SECUNIA","tags":[],"title":"GStreamer FFmpeg Plug-in Multiple Buffer Overflows - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:173","name":"MDKSA-2006:173","refsource":"MANDRIVA","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22230","name":"22230","refsource":"SECUNIA","tags":[],"title":"Ubuntu update for ffmpeg and xine-lib - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22198","name":"22198","refsource":"SECUNIA","tags":[],"title":"Mandriva update for ffmpeg - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22181","name":"22181","refsource":"SECUNIA","tags":[],"title":"xine-lib FFmpeg Multiple Buffer Overflow Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-358-1","name":"USN-358-1","refsource":"UBUNTU","tags":[],"title":"usn/usn-358-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20009","name":"20009","refsource":"BID","tags":["Patch"],"title":"FFmpeg Image File Multiple Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://security.gentoo.org/glsa/glsa-200609-09.xml","name":"GLSA-200609-09","refsource":"GENTOO","tags":["Patch","Vendor Advisory"],"title":"Gentoo Linux Documentation\n--\n  FFmpeg: Buffer overflows","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/23213","name":"23213","refsource":"SECUNIA","tags":[],"title":"SUSE update for mono - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4800","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4800","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4800","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ffmpeg","cpe5":"ffmpeg","cpe6":"0.4.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4800","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c.  NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"MDKSA-2006:174","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:174"},{"name":"22181","refsource":"SECUNIA","url":"http://secunia.com/advisories/22181"},{"name":"SUSE-SA:2006:073","refsource":"SUSE","url":"http://www.novell.com/linux/security/advisories/2006_73_mono.html"},{"name":"22230","refsource":"SECUNIA","url":"http://secunia.com/advisories/22230"},{"name":"22201","refsource":"SECUNIA","url":"http://secunia.com/advisories/22201"},{"name":"20009","refsource":"BID","url":"http://www.securityfocus.com/bid/20009"},{"name":"23010","refsource":"SECUNIA","url":"http://secunia.com/advisories/23010"},{"name":"USN-358-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-358-1"},{"name":"23213","refsource":"SECUNIA","url":"http://secunia.com/advisories/23213"},{"name":"22200","refsource":"SECUNIA","url":"http://secunia.com/advisories/22200"},{"name":"22198","refsource":"SECUNIA","url":"http://secunia.com/advisories/22198"},{"name":"MDKSA-2006:173","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:173"},{"name":"21921","refsource":"SECUNIA","url":"http://secunia.com/advisories/21921"},{"name":"MDKSA-2006:176","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:176"},{"name":"DSA-1215","refsource":"DEBIAN","url":"http://www.us.debian.org/security/2006/dsa-1215"},{"name":"22182","refsource":"SECUNIA","url":"http://secunia.com/advisories/22182"},{"name":"MDKSA-2006:175","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:175"},{"name":"22180","refsource":"SECUNIA","url":"http://secunia.com/advisories/22180"},{"name":"22203","refsource":"SECUNIA","url":"http://secunia.com/advisories/22203"},{"name":"22202","refsource":"SECUNIA","url":"http://secunia.com/advisories/22202"},{"name":"http://bugs.gentoo.org/show_bug.cgi?id=133520","refsource":"MISC","url":"http://bugs.gentoo.org/show_bug.cgi?id=133520"},{"name":"GLSA-200609-09","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200609-09.xml"}]}},"nvd":{"publishedDate":"2006-09-14 22:07:00","lastModifiedDate":"2018-10-30 16:25:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.7:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.6:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.8:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ffmpeg:ffmpeg:0.4.9:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4800","Ordinal":"20140","Title":"CVE-2006-4800","CVE":"CVE-2006-4800","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4800","Ordinal":"1","NoteData":"Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c.  NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4800","Ordinal":"2","NoteData":"2006-09-14","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4800","Ordinal":"3","NoteData":"2006-10-03","Type":"Other","Title":"Modified"}]}}}