CVE-2014-7933
Published: 22 January 2015
Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
chromium-browser
Launchpad, Ubuntu, Debian |
artful |
Released
(40.0.2214.94-0ubuntu1.1120)
|
| bionic |
Released
(40.0.2214.94-0ubuntu1.1120)
|
|
| lucid |
Ignored
(end of life)
|
|
| precise |
Ignored
|
|
| trusty |
Released
(40.0.2214.94-0ubuntu0.14.04.1.1068)
|
|
| upstream |
Released
(40.0.2214.91)
|
|
| utopic |
Released
(40.0.2214.94-0ubuntu0.14.10.1.1110)
|
|
| vivid |
Released
(40.0.2214.94-0ubuntu1.1120)
|
|
| wily |
Released
(40.0.2214.94-0ubuntu1.1120)
|
|
| xenial |
Released
(40.0.2214.94-0ubuntu1.1120)
|
|
| yakkety |
Released
(40.0.2214.94-0ubuntu1.1120)
|
|
| zesty |
Released
(40.0.2214.94-0ubuntu1.1120)
|
|
|
ffmpeg
Launchpad, Ubuntu, Debian |
artful |
Not vulnerable
|
| bionic |
Not vulnerable
|
|
| lucid |
Ignored
(end of life)
|
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Not vulnerable
|
|
| utopic |
Does not exist
|
|
| vivid |
Not vulnerable
|
|
| wily |
Not vulnerable
|
|
| xenial |
Not vulnerable
|
|
| yakkety |
Not vulnerable
|
|
| zesty |
Not vulnerable
|
|
|
Patches:
upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=490a3ebf36821b81f73e34ad3f554cb523dd2682 |
||
|
libav
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| precise |
Released
(4:0.8.17-0ubuntu0.12.04.1)
|
|
| trusty |
Released
(6:9.20-0ubuntu0.14.04.1)
|
|
| upstream |
Released
(0.8.17)
|
|
| utopic |
Ignored
(end of life)
|
|
| vivid |
Ignored
(end of life)
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
Patches:
upstream: https://git.libav.org/?p=libav.git;a=commit;h=490a3ebf36821b81f73e34ad3f554cb523dd2682 upstream: https://git.libav.org/?p=libav.git;a=commit;h=51dd54c51aaca909893c9f90a4119e96ff71ffdf |
||
|
mplayer
Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
| bionic |
Not vulnerable
|
|
| lucid |
Ignored
(end of life)
|
|
| precise |
Ignored
(end of life)
|
|
| trusty |
Not vulnerable
(uses system ffmpeg)
|
|
| upstream |
Not vulnerable
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Not vulnerable
|
|
| yakkety |
Ignored
(end of life)
|
|
| zesty |
Ignored
(end of life)
|
|
|
oxide-qt
Launchpad, Ubuntu, Debian |
artful |
Released
(1.4.2-0ubuntu1)
|
| bionic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| precise |
Does not exist
|
|
| trusty |
Released
(1.4.2-0ubuntu0.14.04.1)
|
|
| upstream |
Released
(1.4.2)
|
|
| utopic |
Released
(1.4.2-0ubuntu0.14.10.1)
|
|
| vivid |
Released
(1.4.2-0ubuntu1)
|
|
| wily |
Released
(1.4.2-0ubuntu1)
|
|
| xenial |
Released
(1.4.2-0ubuntu1)
|
|
| yakkety |
Released
(1.4.2-0ubuntu1)
|
|
| zesty |
Released
(1.4.2-0ubuntu1)
|
|