~ubuntu-security/ubuntu-cve-tracker/master

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Candidate: CVE-2017-9123
PublicDate: 2017-06-12
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9123
 https://www.exploit-db.com/exploits/42148/
Description:
 The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4
 allows remote attackers to cause a denial of service (invalid memory read
 and application crash) via a crafted mp4 file.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:

Patches_libquicktime:
upstream_libquicktime: needs-triage
precise/esm_libquicktime: DNE
trusty_libquicktime: needed
vivid/stable-phone-overlay_libquicktime: DNE
vivid/ubuntu-core_libquicktime: DNE
xenial_libquicktime: needed
yakkety_libquicktime: ignored (reached end-of-life)
zesty_libquicktime: needed
devel_libquicktime: needed