CVE-2011-0723

Published: 16 February 2011

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.

Notes

Author	Note
mdeslaur	as of 2010-02-16, fix may be incomplete, see upstream bug.

Priority

Status

Package	Release	Status
ffmpeg Launchpad, Ubuntu, Debian	dapper	Ignored (end of life)
	hardy	Released (3:0.cvs20070307-5ubuntu7.6)
	karmic	Released (4:0.5+svn20090706-2ubuntu2.3)
	lucid	Released (4:0.5.1-1ubuntu1.1)
	maverick	Released (4:0.6-2ubuntu6.1)
	upstream	Needs triage
	Patches: upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=f7494394ee8b375c9962e7528e7b7de6db76518e upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=8069e2f6fbd79e3d3d2ba17f5f097475b43e2921 upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=c47ca25e74bbe465cdc8b99d4f6ab4f0ad5e4229 upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=2bbec1eda46d907605772a8b6e8263caa4bc4c82 upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=cf69619141a5742c4e4156177335d553c5bab7b6
libav Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Does not exist
	lucid	Does not exist
	maverick	Does not exist
	upstream	Needs triage
	Patches: upstream: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c47ca25e74bbe465cdc8b99d4f6ab4f0ad5e4229 upstream: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=2bbec1eda46d907605772a8b6e8263caa4bc4c82

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›