Summary
It was discovered that LibASS incorrectly handled certain ASS files. A remote
attacker could possibly use this issue to cause a denial of service. One of
the issues, CVE-2016-7970, only affected Ubuntu 16.04 ESM.
(CVE-2016-7969, CVE-2016-7970, CVE-2016-7972)
It was discovered that LibASS incorrectly handled parsing operations for
specific nested character strings. An attacker could possibly use this issue
to cause a denial of service. This issue was only fixed in Ubuntu 16.04 LTS.
(CVE-2020-24994)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libass | 0.10.1-3ubuntu1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libass | 0.13.1-1ubuntu0.1~esm2 |
Vulnerabilities 4
-
Unscored —
The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of serv…
-
Unscored —
Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to caus…
-
Unscored —
The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial…
-
Unscored —
Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause…