oss-sec mailing list archives
CVE id request: libavformat
From: Steffen Joeris <steffen.joeris () skolelinux de>
Date: Thu, 10 Jul 2008 00:50:44 +1000
Hi There is a possible DoS in libavformat. mplayer bugreport: https://roundup.mplayerhq.hu/roundup/ffmpeg/issue311 The quote from the bugreport: This has audio sectors mixed in with video sectors, so the check at psxstr.c:319 copies them onto the end of the video packet, going past the end of the buffer. Upstream patch: http://svn.mplayerhq.hu/ffmpeg/trunk/libavformat/psxstr.c?r1=13993&r2=13992&pathrev=13993 Debian bugreport: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489965 Could I get a CVE id for this? Cheers Steffen
Attachment:
signature.asc
Description: This is a digitally signed message part.
Current thread:
- CVE id request: libavformat Steffen Joeris (Jul 09)
- Re: CVE id request: libavformat Nico Golde (Jul 16)