CVE-2011-4579

Priority
Medium
Description
An error within the "svq1_decode_frame()" function
(libavcodec/svq1dec.c) can be exploited to corrupt memory.
References
Notes
mdeslaur> ffmpeg-extra in multiverse needs to have matching version
mdeslaur> libav-extra is built with tarball produced by libav package
mdeslaur> This fixes NGS00148
mdeslaur> as of 2011-12-22, libav has no equivalent patch
mdeslaur> see thread here: http://thread.gmane.org/gmane.comp.video.libav.devel/15130
Package
Source: libav (LP Ubuntu Debian)
Upstream:released (0.7.3)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 10.10 (Maverick Meerkat):DNE
Ubuntu 11.04 (Natty Narwhal):released (4:0.6.4-0ubuntu0.11.04.1)
Ubuntu 11.10 (Oneiric Ocelot):released (4:0.7.3-0ubuntu0.11.10.1)
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (4:0.7.3-2ubuntu1)
Patches:
Upstream:http://git.libav.org/?p=libav.git;a=commit;h=6e24b9488e67849a28e64a8056e05f83cf439229
Package
Upstream:needs-triage
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (4:0.5.1-1ubuntu1.3)
Ubuntu 10.10 (Maverick Meerkat):released (4:0.6-2ubuntu3.3)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Package
Upstream:needs-triage
Ubuntu 8.04 LTS (Hardy Heron):ignored (reached end-of-life)
Ubuntu 10.04 LTS (Lucid Lynx):released (4:0.5.1-1ubuntu1.3)
Ubuntu 10.10 (Maverick Meerkat):released (4:0.6-2ubuntu6.3)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Patches:
Upstream:http://git.videolan.org/?p=ffmpeg.git;a=commit;h=4931c8f0f10bf8dedcf626104a6b85bfefadc6f2
Package
Upstream:needs-triage
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 10.10 (Maverick Meerkat):DNE
Ubuntu 11.04 (Natty Narwhal):released (4:0.6.4-1ubuntu1)
Ubuntu 11.10 (Oneiric Ocelot):released (4:0.7.3ubuntu0.11.10.1)
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (4:0.7.3ubuntu1)
More Information

Valid XHTML 1.0 Strict

Updated: 2012-01-17 18:14:36 UTC (commit 4684)