faad2 2.0.0+cvs20040908+mp4v2+bmp-0ubuntu5.1 source package in Ubuntu

Changelog

faad2 (2.0.0+cvs20040908+mp4v2+bmp-0ubuntu5.1) gutsy-security; urgency=low

  * SECURITY UPDATE: Heap-based buffer overflow in the decodeMP4file function
    (frontend/main.c) in FAAD2 before 2.6.1 allows remote attackers to cause
    a denial of service (crash) and possibly execute arbitrary code via a
    crafted MPEG-4 (MP4) file. (Closes LP: #277110)
  * 11_CVE-2008-4201.diff
    - Patch supplied by upstream modified slightly to patch cleanly
      and address vulnerability.
  * References
    http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4201
    http://www.audiocoding.com/patch/main_overflow.diff
    CVE-2008-4201

 -- Stefan Lesicnik <email address hidden>   Fri, 03 Oct 2008 10:46:07 +0200

Upload details

Uploaded by:
Stefan Lesicnik
Uploaded to:
Gutsy
Original maintainer:
MOTU
Architectures:
any
Section:
misc
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
faad2_2.0.0+cvs20040908+mp4v2+bmp.orig.tar.gz 1.2 MiB b0c1e8030ef01ddd6f17662b5cdf874250c77a5173fc5219aca51be8eca50fdd
faad2_2.0.0+cvs20040908+mp4v2+bmp-0ubuntu5.1.diff.gz 6.3 KiB 93ac6d29b5535f442a1e419b0e687e9dab1732dbf3b139fd624a868b7120c5a6
faad2_2.0.0+cvs20040908+mp4v2+bmp-0ubuntu5.1.dsc 855 bytes 2ab983345ea1b96a08c5ef7a946a7cfb37f8f9fd194b078d3d1f7e74b1d459a7

View changes file

Binary packages built by this source

bmp-mp4: No summary available for bmp-mp4 in ubuntu gutsy.

No description available for bmp-mp4 in ubuntu gutsy.

faad: No summary available for faad in ubuntu gutsy.

No description available for faad in ubuntu gutsy.

libfaad2-0: No summary available for libfaad2-0 in ubuntu gutsy.

No description available for libfaad2-0 in ubuntu gutsy.

libfaad2-dev: No summary available for libfaad2-dev in ubuntu gutsy.

No description available for libfaad2-dev in ubuntu gutsy.

libmp4v2-0: No summary available for libmp4v2-0 in ubuntu gutsy.

No description available for libmp4v2-0 in ubuntu gutsy.

libmp4v2-dev: No summary available for libmp4v2-dev in ubuntu gutsy.

No description available for libmp4v2-dev in ubuntu gutsy.

xmms-mp4: No summary available for xmms-mp4 in ubuntu gutsy.

No description available for xmms-mp4 in ubuntu gutsy.