Summary
Chris Evans discovered that GStreamer Good Plugins did not correctly handle
malformed FLC movie files. If a user were tricked into opening a crafted
FLC movie file with a GStreamer application, an attacker could cause a
denial of service via application crash, or execute arbitrary code with the
privileges of the user invoking the program.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gst-plugins-good0.10 | 0.10.31-3+nmu1ubuntu5.1 |
| Ubuntu · 14.04 LTS 14.04:LTS | gst-plugins-good1.0 | 1.2.4-1~ubuntu1.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | gst-plugins-good1.0 | 1.8.2-1ubuntu0.2 |
References
-
report
https://launchpad.net/bugs/1643901