CVE-2010-3908
Published: 16 February 2011
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file.
Priority
Status
Package | Release | Status |
---|---|---|
ffmpeg Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
hardy |
Released
(3:0.cvs20070307-5ubuntu7.6)
|
|
karmic |
Released
(4:0.5+svn20090706-2ubuntu2.3)
|
|
lucid |
Released
(4:0.5.1-1ubuntu1.1)
|
|
maverick |
Not vulnerable
(4:0.6-2ubuntu6)
|
|
upstream |
Needed
|
|
Patches: upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=48b086b0efa40799ace96bcec010b6b72a9490d6 upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=445f0a8b666a34e6402f6ae96c6804c8bc024baa |