CVE-2008-4867: Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-depen...

Security readout for executives and security teams

This is an old FFmpeg media-parsing flaw involving DCA/DTS audio handling. A specially crafted media input could trigger a buffer overflow in affected FFmpeg code, with the public record listing the impact as unknown. Business urgency depends on whether legacy media-processing stacks still include vulnerable FFmpeg or MPlayer components. Likely exposure is limited to legacy systems running FFmpeg 0.4.9-era code before r14917, MPlayer builds using that code, or products bundling affected libavcodec. Systems that parse untrusted media files have the most relevant exposure. Do not treat this as a current mass-exploitation emergency based on the provided evidence. Treat it as legacy technical debt: verify exposure in media-handling systems and remove vulnerable FFmpeg-era components where found. Mitigation focus: Inventory FFmpeg, libavcodec, and MPlayer versions across media-processing systems.; Update affected FFmpeg code to r14917 or a vendor-fixed supported package.; Check Mandriva, Ubuntu, Gentoo, or applicable vendor advisories for backported fixes..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.