Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-630-1: ffmpeg vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-630-1: ffmpeg vulnerability
# 1  
Old 07-28-2008
USN-630-1: ffmpeg vulnerability
Referenced CVEs:
CVE-2008-3162


Description:
=========================================================== Ubuntu Security Notice USN-630-1 July 28, 2008 ffmpeg vulnerability CVE-2008-3162 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 Ubuntu 8.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 7.10: libavformat1d 3:0.cvs20070307-5ubuntu4.1 Ubuntu 8.04 LTS: libavformat1d 3:0.cvs20070307-5ubuntu7.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: It was discovered that ffmpeg did not correctly handle STR file demuxing. If a user were tricked into processing a malicious STR file, a remote attacker could execute arbitrary code with user privileges via applications linked against ffmpeg.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

kdenlive_render

KDENLIVE_RENDER(1)					   Render program for Kdenlive. 					KDENLIVE_RENDER(1)

NAME

       kdenlive_render - Render program for Kdenlive.

SYNOPSIS

       kdenlive_render [-erase] [in=pos] [out=pos] [render] [profile] [rendermodule] [player] [src] [dest] [[arg1] [arg2] ...]

DESCRIPTION

       Render  program	for Kdenlive. Renders kdenlive project detached from Kdenlive, while providing feedback through kuiserver. This program is
       not meant to be called directly by users, but is called from Kdenlive, when a rendering process is started.

OPTIONS

   Options:
       -erase If present, src file will be erased after rendering

       in=pos Start rendering at frame pos

       out=pos
	      End rendering at frame pos

       render Path to MLT melt render program

       profile
	      The MLT video profile

       rendermodule
	      The MLT consumer used for rendering, usually it is avformat

       player Path to video player to play when rendering is over, use '-' to disable playing

       src    Source file - usually MLT playlist

       dest   Destination file

       args   Space separated libavformat arguments

ENVIRONMENT

       KDENLIVE_RENDER_LOG
	      If $KDENLIVE_RENDER_LOG is set, a log will be written to /tmp/kdenlive_render.log.XXXXXXXX,  that  contains  information	about  the
	      result of calling melt, ffmpeg, etc. This can be used for debugging.

SEE ALSO

       Please see the homepage at http://www.kdenlive.org/

AUTHORS

       Jean-Baptiste Mardelle <jb@kdenlive.org>
       Marco Gittler <g.marco@freenet.de>

K Desktop Environment						     Dec 2008							KDENLIVE_RENDER(1)