Lucene search
UbuntuUSN-1705-1HistoryJan 28, 2013 - 12:00 a.m.
Libav vulnerabilities
2013-01-2800:00:00
ubuntu.com
34
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
9.9
Confidence
High
EPSS
0.012
Percentile
85.6%
Releases
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 11.10
Packages
- libav - Multimedia player, server, encoder and transcoder
Details
It was discovered that Libav incorrectly handled certain malformed media
files. If a user were tricked into opening a crafted media file, an
attacker could cause a denial of service via application crash, or possibly
execute arbitrary code with the privileges of the user invoking the
program.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.10 | noarch | libavformat53 | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | ffmpeg | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libav-dbg | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libav-tools | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libavcodec-dev | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libavcodec53 | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libavdevice-dev | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libavdevice53 | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libavfilter-dev | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libavfilter2 | < 6:0.8.5-0ubuntu0.12.10.1 | UNKNOWN |
References
Related
securityvulns
securityvulns
[USN-1705-1] Libav vulnerabilities
2013-02-04 00:00:00
libav / ffmpeg multiple security vulnerabilities
2013-02-04 00:00:00
ffmpeg library multiple security vulnerabilities
2012-06-17 00:00:00
nessus
nessus
Ubuntu 11.10 / 12.04 LTS / 12.10 : libav vulnerabilities (USN-1705-1)
2013-01-29 00:00:00
Ubuntu 10.04 LTS : ffmpeg vulnerabilities (USN-1706-1)
2013-01-29 00:00:00
GLSA-201406-28 : Libav: Multiple vulnerabilities
2014-06-27 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1705-1)
2013-01-31 00:00:00
Ubuntu Update for libav USN-1705-1
2013-01-31 00:00:00
Ubuntu Update for ffmpeg USN-1706-1
2013-01-31 00:00:00
ubuntu
ubuntu
FFmpeg vulnerabilities
2013-01-28 00:00:00
FFmpeg vulnerabilities
2012-12-19 00:00:00
Libav vulnerabilities
2012-11-12 00:00:00
gentoo
gentoo
Libav: Multiple vulnerabilities
2014-06-26 00:00:00
FFmpeg: Multiple vulnerabilities
2013-10-25 00:00:00
Chromium, V8: Multiple vulnerabilities
2013-09-24 00:00:00
debian
debian
[SECURITY] [DSA 2624-1] ffmpeg security update
2013-02-16 18:18:20
debiancve
debiancve
cvelist
cvelist
nvd
nvd
prion
prion
Code injection
2012-09-10 22:55:00
Design/Logic Flaw
2012-09-10 22:55:00
Memory corruption
2012-12-12 11:38:00
cve
cve
ubuntucve
ubuntucve
freebsd
freebsd
gstreamer-ffmpeg -- Multiple vulnerabilities in bundled libav
2013-08-20 00:00:00
chromium -- multiple vulnerabilities
2012-12-11 00:00:00
threatpost
threatpost
Critical Vulnerability Fixed in Chrome 23
2012-12-11 20:45:25
chrome
chrome
Stable Channel Update
2012-12-11 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
9.9
Confidence
High
EPSS
0.012
Percentile
85.6%
Related for USN-1705-1