MDVSA-2011:089 -- Mandriva mplayerID: oval:org.secpod.oval:def:301019 | Date: (C)2012-01-07 (M)2023-11-09 |
Class: PATCH | Family: unix |
Multiple vulnerabilities have been identified and fixed in mplayer: FFmpeg 0.5 allows remote attackers to cause a denial of service via a crafted file that triggers an infinite loop. flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an arbitrary offset dereference vulnerability. libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service via a crafted .ogg file, related to the vorbis_floor0_decode function. Fix heap corruption crashes Fix invalid reads in VC-1 decoding And several additional vulnerabilites originally discovered by Google Chrome developers were also fixed with this advisory. The updated packages have been patched to correct these issues.
Platform: |
Mandriva Linux 2010.1 |