Candidate: CVE-2016-7953 PublicDate: 2016-12-13 20:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7953 http://www.openwall.com/lists/oss-security/2016/10/04/4 Description: Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string. Ubuntu-Description: Notes: Bugs: https://launchpad.net/bugs/1691532 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840445 Priority: low Discovered-by: Tobias Stoeckmann Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] Patches_libxvmc: upstream: https://cgit.freedesktop.org/xorg/lib/libXvMC/commit/?id=2cd95e7da8367cccdcdd5c9b160012d1dec5cbdb upstream_libxvmc: released (1.0.10) precise_libxvmc: ignored (reached end-of-life) precise/esm_libxvmc: DNE (precise was needed) trusty_libxvmc: ignored (reached end-of-life) trusty/esm_libxvmc: DNE (trusty was needed) vivid/stable-phone-overlay_libxvmc: DNE vivid/ubuntu-core_libxvmc: DNE xenial_libxvmc: ignored (end of standard support, was needed) esm-infra/xenial_libxvmc: needed yakkety_libxvmc: ignored (reached end-of-life) zesty_libxvmc: ignored (reached end-of-life) artful_libxvmc: ignored (reached end-of-life) bionic_libxvmc: released (2:1.0.10-1) cosmic_libxvmc: released (2:1.0.10-1) disco_libxvmc: released (2:1.0.10-1) eoan_libxvmc: released (2:1.0.10-1) focal_libxvmc: released (2:1.0.10-1) groovy_libxvmc: released (2:1.0.10-1) hirsute_libxvmc: released (2:1.0.10-1) impish_libxvmc: released (2:1.0.10-1) jammy_libxvmc: released (2:1.0.10-1) devel_libxvmc: released (2:1.0.10-1)