Oval Definition:oval:org.mitre.oval:def:12918
Revision Date:2014-06-30Version:20
Title:USN-734-1 -- ffmpeg, ffmpeg-debian vulnerabilities
Description:It was discovered that FFmpeg did not correctly handle certain malformed Ogg Media files. If a user were tricked into opening a crafted Ogg Media file, an attacker could cause the application using FFmpeg to crash, leading to a denial of service. It was discovered that FFmpeg did not correctly handle certain parameters when creating DTS streams. If a user were tricked into processing certain commands, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 8.10. It was discovered that FFmpeg did not correctly handle certain malformed DTS Coherent Acoustics files. If a user were tricked into opening a crafted DCA file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that FFmpeg did not correctly handle certain malformed 4X movie files. If a user were tricked into opening a crafted 4xm file, an attacker could execute arbitrary code with the privileges of the user invoking the program
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2008-4610
CVE-2008-4866
CVE-2008-4867
CVE-2009-0385
USN-734-1
USN-734-1
Platform(s):Ubuntu 7.10
Ubuntu 8.04
Ubuntu 8.10
Product(s):ffmpeg
ffmpeg-debian
Definition Synopsis
  • Release section
  • Ubuntu 7.10 is installed
  • AND Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is i386
  • OR Installed architecture is amd64
  • OR Installed architecture is lpia
  • OR Installed architecture is powerpc
  • AND Packages section
  • ffmpeg DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libavcodec-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libavutil-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libpostproc-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libavformat1d DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libswscale1d DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libavcodec1d DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libswscale-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libavutil1d DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libpostproc1d DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR libavformat-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu4.2
  • OR Release section
  • Ubuntu 8.10 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND ffmpeg-doc DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is i386
  • OR Installed architecture is powerpc
  • OR Installed architecture is sparc
  • OR Installed architecture is lpia
  • AND Packages section
  • ffmpeg-dbg DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavcodec51 DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR ffmpeg DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libswscale0 DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavutil-dev DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavformat52 DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libpostproc-dev DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libpostproc51 DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavdevice52 DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavcodec-dev DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libswscale-dev DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavutil49 DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavformat-dev DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR libavdevice-dev DPKG is earlier than 3:0.svn20080206-12ubuntu3.1
  • OR Release section
  • Ubuntu 8.04 is installed
  • AND Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is i386
  • OR Installed architecture is amd64
  • OR Installed architecture is lpia
  • OR Installed architecture is powerpc
  • AND Packages section
  • ffmpeg DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libavcodec-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libavutil-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libpostproc-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libavformat1d DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libswscale1d DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libavcodec1d DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libswscale-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libavutil1d DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libpostproc1d DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • OR libavformat-dev DPKG is earlier than 3:0.cvs20070307-5ubuntu7.3
  • BACK