CVE-2012-0823

CVE-2012-0823 affects the VP8 Codec SDK (libvpx) prior to 1.0.0 (code-named “Duclair”). The issue arises from the clamping of motion vectors in SPLITMV blocks, enabling an out-of-bounds read when decoding from a P-frame or from unspecified corrupt input, which can cause an application crash (DoS)...

Mandriva Linux Security Advisory : libvpx (MDVSA-2012:023-1)

A vulnerability has been found and corrected in libvpx : VP8 Codec SDK libvpx before 1.0.0 Duclair allows remote attackers to cause a denial of service application crash via 1 unspecified corrupt input or 2 by starting decoding from a P-frame, which triggers an out-of-bounds read, related to the...

Fedora Update for libvpx FEDORA-2012-1147

Check for the Version of libvpx OpenVAS Vulnerability Test Fedora Update for libvpx FEDORA-2012-1147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for libvpx FEDORA-2012-1147

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: libvpx-1.0.0-1.fc15

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...

Mandriva Linux Security Advisory : mozilla (MDVSA-2012:013)

Security issues were identified and fixed in mozilla firefox and thunderbird : Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via...

Fedora 16 : gstreamer-plugins-bad-free-0.10.22-2.fc16.2 / firefox-10.0-1.fc16 / libvpx-1.0.0-1.fc16 / etc (2012-1140)

Latest security update of Mozilla products and dependent packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 16 Update: libvpx-1.0.0-1.fc16

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...

Fedora 16 : libvpx-0.9.7.1-1.fc16 (2011-11057)

Update to libvpx 0.9.7-p1 Update to libvpx 0.9.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 16 Update: libvpx-0.9.7.1-1.fc16

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...

Ubuntu Update for libvpx vulnerability USN-1087-1

Ubuntu Update for Linux kernel vulnerabilities USN-1087-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10871.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libvpx vulnerability USN-1087-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1087-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1087-1: libvpx vulnerability

Chris Evans discovered that libvpx did not properly perform bounds checking. If an application using libvpx opened a specially crafted WebM file, an attacker could cause a denial of service...

Gentoo Security Advisory GLSA 201101-03 (libvpx)

The remote host is missing updates announced in advisory GLSA 201101-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201101-03 (libvpx)

The remote host is missing updates announced in advisory GLSA 201101-03. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

libvpx security update

0.9.0-8 - Fix CVE-2010-4203 Resolves: rhbz652440 0.9.0-7 - Import 0.9.0-6 package from Fedora - Add patch porting yasm syntax to gas Related: rhbz603113...

GLSA-201101-03 : libvpx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201101-03 libvpx: User-assisted execution of arbitrary code libvpx is vulnerable to an integer overflow vulnerability when processing crafted VP8 video streams. Impact : A remote attacker could entice a user to open a specially...

libvpx: User-assisted execution of arbitrary code

Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description libvpx is vulnerable to an integer overflow vulnerability when processing crafted VP8 video streams. Impact A remote attacker could entice a user to open a...

RHEL 6 : libvpx (RHSA-2010:0999)

Updated libvpx packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: libvpx security update

Updated libvpx packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...