1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
Candidate: CVE-2012-2792
PublicDate: 2012-09-10
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2792
http://www.openwall.com/lists/oss-security/2012/09/02/4
http://www.openwall.com/lists/oss-security/2012/08/31/3
http://secunia.com/advisories/50468
http://ffmpeg.org/security.html
Description:
Unspecified vulnerability in the decode_init function in
libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and
attack vectors, related to the samples per frame.
Ubuntu-Description:
Notes:
mdeslaur> ffmpeg-extra in multiverse needs to have matching version
mdeslaur> libav-extra is built with tarball produced by libav package
mdeslaur> libav has equivalent fix in trunk
mdeslaur> no wmalossless in 0.8.x and older
Bugs:
Priority: low
Discovered-by:
Assigned-to:
Patches_ffmpeg:
upstream: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d442c4462a2692e27a24e1a9d0eb6f18725c7bd8
upstream_ffmpeg: released (0.11)
hardy_ffmpeg: ignored (reached end-of-life)
lucid_ffmpeg: not-affected
natty_ffmpeg: DNE
oneiric_ffmpeg: DNE
precise_ffmpeg: DNE
quantal_ffmpeg: DNE
devel_ffmpeg: DNE
Patches_ffmpeg-extra:
upstream_ffmpeg-extra: needs-triage
hardy_ffmpeg-extra: DNE
lucid_ffmpeg-extra: not-affected
natty_ffmpeg-extra: DNE
oneiric_ffmpeg-extra: DNE
precise_ffmpeg-extra: DNE
quantal_ffmpeg-extra: DNE
devel_ffmpeg-extra: DNE
Patches_libav:
upstream: http://git.libav.org/?p=libav.git;a=commitdiff;h=065b3a1cfa3f23aedf76244b3f3883ba913173ff
upstream_libav: needs-triage
hardy_libav: DNE
lucid_libav: DNE
natty_libav: ignored (reached end-of-life)
oneiric_libav: not-affected
precise_libav: not-affected
quantal_libav: not-affected
devel_libav: not-affected
Patches_libav-extra:
upstream_libav-extra: needs-triage
hardy_libav-extra: DNE
lucid_libav-extra: DNE
natty_libav-extra: ignored (reached end-of-life)
oneiric_libav-extra: not-affected
precise_libav-extra: not-affected
quantal_libav-extra: not-affected
devel_libav-extra: not-affected
|