diff options
Diffstat (limited to 'metadata/glsa/glsa-200609-09.xml')
-rw-r--r-- | metadata/glsa/glsa-200609-09.xml | 61 |
1 files changed, 61 insertions, 0 deletions
diff --git a/metadata/glsa/glsa-200609-09.xml b/metadata/glsa/glsa-200609-09.xml new file mode 100644 index 000000000000..8d203adb91ca --- /dev/null +++ b/metadata/glsa/glsa-200609-09.xml @@ -0,0 +1,61 @@ +<?xml version="1.0" encoding="utf-8"?> +<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd"> +<glsa id="200609-09"> + <title>FFmpeg: Buffer overflows</title> + <synopsis> + FFmpeg is vulnerable to multiple buffer overflows that might be exploited + to execute arbitrary code. + </synopsis> + <product type="ebuild">ffmpeg</product> + <announced>2006-09-13</announced> + <revised count="02">2006-12-13</revised> + <bug>133520</bug> + <access>remote</access> + <affected> + <package name="media-video/ffmpeg" auto="yes" arch="*"> + <unaffected range="ge">0.4.9_p20060530</unaffected> + <vulnerable range="lt">0.4.9_p20060530</vulnerable> + </package> + </affected> + <background> + <p> + FFmpeg is a very fast video and audio converter. + </p> + </background> + <description> + <p> + FFmpeg contains buffer overflows in the AVI processing code. + </p> + </description> + <impact type="normal"> + <p> + An attacker could trigger the buffer overflows by enticing a user to + load a specially crafted AVI file in an application using the FFmpeg + library. This might result in the execution of arbitrary code in the + context of the running application. + </p> + </impact> + <workaround> + <p> + There is no known workaround at this time. + </p> + </workaround> + <resolution> + <p> + All FFmpeg users should upgrade to the latest version: + </p> + <code> + # emerge --sync + # emerge --ask --oneshot --verbose ">=media-video/ffmpeg-0.4.9_p20060530"</code> + </resolution> + <references> + <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4799">CVE-2006-4799</uri> + <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4800">CVE-2006-4800</uri> + </references> + <metadata tag="submitter" timestamp="2006-09-12T15:05:01Z"> + falco + </metadata> + <metadata tag="bugReady" timestamp="2006-09-12T15:13:14Z"> + falco + </metadata> +</glsa> |