Summary
It was discovered that MediaInfoLib contained multiple security issues when
handling certain multimedia files. If a user were tricked into opening a
crafted multimedia file, an attacker could cause MediaInfoLib to crash,
resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libmediainfo | 0.7.67-2ubuntu1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libmediainfo | 0.7.82-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaAr…
-
Unscored —
An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12…