CVE-2018-1999010

    Dashboard / Vulnerabilities / CVE-2018-1999010

    CVE-2018-1999010

    Published: 23 Jul 2018Last Modified: 17 Aug 2026

    Summary:

    Details: FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in cced03dd667a5df6df8fd40d8de0bff477ee02e8 and later.

    References: http://www.securityfocus.com/bid/104896, https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html, https://github.com/FFmpeg/FFmpeg/commit/cced03dd667a5df6df8fd40d8de0bff477ee02e8

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -89355585366b16238244decae40fbe0cc7ae3e40

    Affected versions

    n3.4.2
    n3.4.1
    n3.4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High