Search for vulnerabilities
Vulnerability details: VCID-wuyf-zbxs-aaaa
Vulnerability ID VCID-wuyf-zbxs-aaaa
Aliases CVE-2009-4637
Summary FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.
Status Published
Exploitability 2.0
Weighted Severity 9.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.15792 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.15792 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.15792 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.15792 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.16647 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.31396 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
epss 0.33811 https://api.first.org/data/v1/epss?cve=CVE-2009-4637
cvssv2 10.0 https://nvd.nist.gov/vuln/detail/CVE-2009-4637
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2009-4637
http://scarybeastsecurity.blogspot.com/2009/09/patching-ffmpeg-into-shape.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4637
http://secunia.com/advisories/36805
http://secunia.com/advisories/38643
http://secunia.com/advisories/39482
https://roundup.ffmpeg.org/roundup/ffmpeg/issue1240
http://www.debian.org/security/2010/dsa-2000
http://www.securityfocus.com/bid/36465
http://www.ubuntu.com/usn/USN-931-1
http://www.vupen.com/english/advisories/2010/0935
550442 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550442
cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.5:*:*:*:*:*:*:*
CVE-2009-4637 https://nvd.nist.gov/vuln/detail/CVE-2009-4637
CVE-2009-4637;OSVDB-58509 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/33233.txt
CVE-2009-4637;OSVDB-58509 Exploit https://www.securityfocus.com/bid/36465/info
GLSA-201310-12 https://security.gentoo.org/glsa/201310-12
USN-931-1 https://usn.ubuntu.com/931-1/
Data source Exploit-DB
Date added Sept. 21, 2009
Description FFmpeg 0.5 - Multiple Remote Vulnerabilities
Ransomware campaign use Known
Source publication date Sept. 21, 2009
Exploit type dos
Platform linux
Source update date May 8, 2014
Source URL https://www.securityfocus.com/bid/36465/info
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2009-4637
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.95907
EPSS Score 0.15792
Published At Dec. 17, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.