CVE-2011-4579
Priority
Medium
Description
An error within the "svq1_decode_frame()" function
(libavcodec/svq1dec.c) can be exploited to corrupt memory.
(libavcodec/svq1dec.c) can be exploited to corrupt memory.
References
Notes
mdeslaur> ffmpeg-extra in multiverse needs to have matching version
mdeslaur> libav-extra is built with tarball produced by libav package
mdeslaur> This fixes NGS00148
mdeslaur> as of 2011-12-22, libav has no equivalent patch
mdeslaur> see thread here: http://thread.gmane.org/gmane.comp.video.libav.devel/15130
mdeslaur> libav-extra is built with tarball produced by libav package
mdeslaur> This fixes NGS00148
mdeslaur> as of 2011-12-22, libav has no equivalent patch
mdeslaur> see thread here: http://thread.gmane.org/gmane.comp.video.libav.devel/15130
Package
| Upstream: | released (0.7.3) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 10.10 (Maverick Meerkat): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | released (4:0.6.4-0ubuntu0.11.04.1) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (4:0.7.3-0ubuntu0.11.10.1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (4:0.7.3-2ubuntu1) |
Patches:
| Upstream: | http://git.libav.org/?p=libav.git;a=commit;h=6e24b9488e67849a28e64a8056e05f83cf439229 |
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (4:0.5.1-1ubuntu1.3) |
| Ubuntu 10.10 (Maverick Meerkat): | released (4:0.6-2ubuntu3.3) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | ignored (reached end-of-life) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (4:0.5.1-1ubuntu1.3) |
| Ubuntu 10.10 (Maverick Meerkat): | released (4:0.6-2ubuntu6.3) |
| Ubuntu 11.04 (Natty Narwhal): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
Patches:
| Upstream: | http://git.videolan.org/?p=ffmpeg.git;a=commit;h=4931c8f0f10bf8dedcf626104a6b85bfefadc6f2 |
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 10.10 (Maverick Meerkat): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | released (4:0.6.4-1ubuntu1) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (4:0.7.3ubuntu0.11.10.1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (4:0.7.3ubuntu1) |