7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Simon Kilvington discovered that specially crafted PNG images can trigger
a heap overflow in libavcodec, the multimedia library of ffmpeg, which may
lead to the execution of arbitrary code.
xine-lib includes a local copy of libavcodec.
The old stable distribution (woody) isn’t affected by this problem.
For the stable distribution (sarge) this problem has been fixed in
version 1.0.1-1sarge2.
For the unstable distribution (sid) this problem has been fixed in
version 1.0.1-1.5.
We recommend that you upgrade your xine-lib package.
CPE | Name | Operator | Version |
---|---|---|---|
xine-lib | eq | 1.0.1-1 | |
xine-lib | eq | 1.0.1-1sarge1 |