CVE-2010-3429: Ffmpeg

Medium severity, CVSS 6.8. EPSS: 4.2% chance of exploitation in the next 30 days.

flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability."

Affected products

• Ffmpeg Ffmpeg: up to and including 0.6; version 0.3 only; version 0.3.1 only; version 0.3.2 only; version 0.3.3 only; version 0.3.4 only; …
• Ffmpeg Libavcodec: any version
• Mplayerhq Mplayer: up to and including 1.0; version 0.01 only; version 0.02 only; version 0.05 only; version 0.06 only; version 0.07 only; …

Published 2010-09-30. Last modified 2026-06-16.