CVE-2011-0722
Published: 16 February 2011
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
ffmpeg Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
| hardy |
Not vulnerable
(code not present)
|
|
| karmic |
Released
(4:0.5+svn20090706-2ubuntu2.3)
|
|
| lucid |
Released
(4:0.5.1-1ubuntu1.1)
|
|
| maverick |
Not vulnerable
(4:0.6-2ubuntu6)
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=44511b17cbbb524602c91a198e7314fa57a7062a upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=808f9ce727fb05058a43de8d64539eddf5fa74d6 upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=ec10d2d53999f6edf7d7b5ac88df263eccfb1fb0 upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=d90aeeaf569e4a08c30b3d1d09c3cff3a86eb431 |
||