drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in ffmpeg
Name: |
Ausführen beliebiger Kommandos in ffmpeg |
|
ID: |
USN-630-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 7.10, Ubuntu 8.04 LTS |
|
Datum: |
Di, 29. Juli 2008, 00:19 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3162 |
|
Applikationen: |
FFmpeg |
|
Originalnachricht |
--===============1985435259144815243== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="CE+1k2dSO48ffgeK" Content-Disposition: inline
--CE+1k2dSO48ffgeK Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
=========================================================== Ubuntu Security Notice USN-630-1 July 28, 2008 ffmpeg vulnerability CVE-2008-3162 ===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 7.10 Ubuntu 8.04 LTS
This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the following package versions:
Ubuntu 7.10: libavformat1d 3:0.cvs20070307-5ubuntu4.1
Ubuntu 8.04 LTS: libavformat1d 3:0.cvs20070307-5ubuntu7.1
In general, a standard system upgrade is sufficient to effect the necessary changes.
Details follow:
It was discovered that ffmpeg did not correctly handle STR file demuxing. If a user were tricked into processing a malicious STR file, a remote attacker could execute arbitrary code with user privileges via applications linked against ffmpeg.
Updated packages for Ubuntu 7.10:
Source archives:
ffmpeg_0.cvs20070307-5ubuntu4.1.diff.gz Size/MD5: 38804 cf88843af832d9d7d34ac1337289e4b4 ffmpeg_0.cvs20070307-5ubuntu4.1.dsc Size/MD5: 1334 5a6c6a3f0a36888d2e151c611eb68822 ffmpeg_0.cvs20070307.orig.tar.gz Size/MD5: 2593100 2fe579de8a26351cc3b0b0e443acb09f
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
libavcodec-dev_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 1752240 72e26454383cf6925eddd02ea982ea58 libavcodec1d_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 1571932 d96c44e73690d7acbb38ad664f94da6d libavformat-dev_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 346062 0879fcb6cec97444f728c7d3d53a4810 libavformat1d_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 275856 9a77c31a9989d2544d905b18e21d1ac7 libavutil-dev_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 51326 9c84f676726613bc266a504999664664 libavutil1d_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 37924 fab102ddfb2e3400b6a0152a07c8a046 libpostproc-dev_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 68276 3d02d1a046347047bfdbde434dee3503 libpostproc1d_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 67506 ce25eac35404f421661150e4a74afb86 libswscale-dev_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 113262 7e3e0095fe604289d321b139ebb36077 libswscale1d_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 95636 b017f890d024b73f522f4afba6142e5e ffmpeg_0.cvs20070307-5ubuntu4.1_amd64.deb Size/MD5: 192304 dc70d1c702084fd0b96e97d104b9dd7f
i386 architecture (x86 compatible Intel/AMD):
libavcodec-dev_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 1739398 ce3a2543e44745b99fae1225f17f09d0 libavcodec1d_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 1610974 e809e431c1ba15552d0345729ef1a72a libavformat-dev_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 332978 b6b612b3b541e8dd0145cdafe3eca70a libavformat1d_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 286784 d78389a00d6a5428773c99aac5db89a7 libavutil-dev_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 50802 0c817a0af54a144b0b67aa6c4e404ab0 libavutil1d_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 39628 fa79ef5602771232d50826beadfddab1 libpostproc-dev_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 71730 2bba959fed019abe15160ec56c887b1f libpostproc1d_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 71602 e56394600a50631ed107762647d8b1c5 libswscale-dev_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 110336 12358d12982af0aa60aec03e76614410 libswscale1d_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 96486 b7bae0ef74f9f4f4ab22e4596d079a7c ffmpeg_0.cvs20070307-5ubuntu4.1_i386.deb Size/MD5: 188886 97ef3ef5f873bb37396df065d794006a
lpia architecture (Low Power Intel Architecture):
libavcodec-dev_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 1793980 b0a1d7bdd50f2fa00b749f4aec5cd16d libavcodec1d_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 1655338 02c736a77158ed9ee943b0dbf7d96079 libavformat-dev_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 332760 71a2a22ab9c94e50a12c4d9b57790b16 libavformat1d_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 284234 8c1d710576f0d826326ffc3923060a2e libavutil-dev_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 50688 a5f70265bd43dc1a37990505ce1fd0e7 libavutil1d_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 38802 b3afd4402bd4c27de3d7c86d74abce5c libpostproc-dev_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 75440 dbf1f087ee379f0ecfe259949cc80dc6 libpostproc1d_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 75680 12ccc80b28fa9ee18a6054f30779a05e libswscale-dev_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 115030 e79e080b31b0077f74c79357545665e4 libswscale1d_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 103508 c50780178e28b936bba6759e3355fc1c ffmpeg_0.cvs20070307-5ubuntu4.1_lpia.deb Size/MD5: 189726 1425e2ab1099c5a43d595625c7ea0b2d
powerpc architecture (Apple Macintosh G3/G4/G5):
libavcodec-dev_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 1786516 7642d546af618a39d8d7ff96367aa6b7 libavcodec1d_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 1571816 c1127c579155c768313bce6da1e9bbf2 libavformat-dev_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 369766 73e30de099cdb8913b4b4380df1722e0 libavformat1d_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 308990 fe178bab973e330a76af55f10ae31686 libavutil-dev_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 54466 d6e9e2de8330224c7ee1fcd146c24b44 libavutil1d_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 44524 20fc865f59f6a393e543ee876acb95b5 libpostproc-dev_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 64398 7592823263f8755d91f7e33142bd4d0c libpostproc1d_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 63578 076270e4534c561ddf00221fb8c24585 libswscale-dev_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 109154 77a97320b092d4df4edcedde8a8fac11 libswscale1d_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 87104 b8910a749fd92242f65a1f9971b7f6e6 ffmpeg_0.cvs20070307-5ubuntu4.1_powerpc.deb Size/MD5: 218952 693402dbae06cc98810d414e6b1e3441
sparc architecture (Sun SPARC/UltraSPARC):
libavcodec-dev_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 1791608 22630f8d493c28cbca96b04f5fc29aa7 libavcodec1d_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 1608856 f1e59503f63ce0fe20c4f125423f1ccc libavformat-dev_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 341770 ca4515cfd3f208dae650dc27d9a0f7ba libavformat1d_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 282402 5655c9331b67b3e193b5be7a1a387f79 libavutil-dev_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 52228 dd6683dd9ed6c5a61195cc53a000cc50 libavutil1d_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 40256 5f9e54f91866042ec940a89291a8556e libpostproc-dev_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 42178 1fcc944db6893895f9a3c2a74a003cae libpostproc1d_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 42350 a848235523e70dab1c3c366efe2398e2 libswscale-dev_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 80836 3a1cec10ab05fb84bd8eb0e7656f1b6d libswscale1d_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 65724 9d958ef7735aeb8f61bc9fe7241dab49 ffmpeg_0.cvs20070307-5ubuntu4.1_sparc.deb Size/MD5: 194892 3eece25c5e0eb6c586707b90e435b135
Updated packages for Ubuntu 8.04 LTS:
Source archives:
ffmpeg_0.cvs20070307-5ubuntu7.1.diff.gz Size/MD5: 39397 85e451f76aa9af33da574d59825e5edd ffmpeg_0.cvs20070307-5ubuntu7.1.dsc Size/MD5: 1325 6a69b5336da6c3bc76ff7a84dc5e3503 ffmpeg_0.cvs20070307.orig.tar.gz Size/MD5: 2593100 2fe579de8a26351cc3b0b0e443acb09f
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
libavcodec-dev_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 1756540 30a27df69313f680688c1cd18cb01a5b libavcodec1d_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 1574200 b0a5384973d942f4a7bf46b698d1a685 libavformat-dev_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 346284 9660d3845793b651e17876c5048fd19b libavformat1d_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 275254 5269350a4beb3b5236e4e9b8b6b7235f libavutil-dev_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 51346 f0bc0d2aa5d66c925a03729575ea0c67 libavutil1d_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 37654 4cd93ceac0d629dac9df69e42d712789 libpostproc-dev_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 68454 31396cdc8958039ce188abb645971a43 libpostproc1d_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 67660 1ce82bf69e7d8369639daedd199f1eef libswscale-dev_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 113528 211a8e9de3021cfc9a94ccc4cc96a903 libswscale1d_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 95910 7ce06459bda72cc7aca7618269094e64 ffmpeg_0.cvs20070307-5ubuntu7.1_amd64.deb Size/MD5: 195672 5e9352bf7bf38f484e6c9a367bd06004
i386 architecture (x86 compatible Intel/AMD):
libavcodec-dev_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 1737540 3a324359bc5dc7fdcb49941b6ca67957 libavcodec1d_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 1602324 356168e60e043928c790b9cf95cf2608 libavformat-dev_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 332904 a98335add0631ed73b8ba7ce8901d115 libavformat1d_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 286844 57012d5df173057e360a8bec3a7df119 libavutil-dev_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 50976 e897be483fe052674e68eb9c15180244 libavutil1d_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 39060 1ca97166ba285c4ad1436b35dc1be138 libpostproc-dev_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 73548 fff5397fa4f6cb558ed46f2b7c764544 libpostproc1d_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 73434 4a7fb1cef612d2bc992ac8029ed6508e libswscale-dev_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 112230 04c4c3d95c4528d6ffe09a00ccd73d09 libswscale1d_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 97586 6fecdf43d8fa789d9117d7adfa4835d5 ffmpeg_0.cvs20070307-5ubuntu7.1_i386.deb Size/MD5: 191998 90a87376a7e472dd37bd3ecfe66a8a30
lpia architecture (Low Power Intel Architecture):
libavcodec-dev_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 1793706 10465e8801a5c109e9fac61e590afa50 libavcodec1d_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 1652838 307ee3e5d7b1d83e3faa8c51c2b77162 libavformat-dev_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 333188 47d828d0b0ccfa5bf23075701b81a94e libavformat1d_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 283466 c1720fce1e21d825264efe97c61ce1f2 libavutil-dev_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 51024 b1d6d6f15e81bed1eb9ed7d128061740 libavutil1d_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 38926 9e1a6b67000fc1cfd34d058a0670724a libpostproc-dev_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 75826 51d46dfc71c44b083ce324d4c09b35e3 libpostproc1d_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 76104 5d4dfc3fc7e33d22a74a9c28a6106245 libswscale-dev_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 116906 dc88aec0e4e644ebce4ca590bf173884 libswscale1d_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 101546 e3346bec4cfb8d0add0f407f7fd1ef21 ffmpeg_0.cvs20070307-5ubuntu7.1_lpia.deb Size/MD5: 193692 a70fab551eb16ea059861f96160bd23c
powerpc architecture (Apple Macintosh G3/G4/G5):
libavcodec-dev_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 1776030 78e0177e4537ac3415d87475d10979bd libavcodec1d_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 1568236 a44e61073e63d6c5d771cc62dadaebcf libavformat-dev_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 375506 f205a8e3354cb81c912865e716fad41d libavformat1d_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 308630 87bbc889a612b03bf05f1e5df3c80b1d libavutil-dev_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 55372 dc4ae8123f5fe161dd03148d956778ca libavutil1d_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 45530 ec7015a3891c4be9449193324ad66689 libpostproc-dev_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 64902 b6a985bdccac0a20bb774db2339fba92 libpostproc1d_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 64824 db5675cbfde6770811ec7cb0ab1af5e9 libswscale-dev_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 109806 59ca6b60cb869384d55e95744fe70bc9 libswscale1d_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 87034 440121c645a879375d0cb0db4a8a354f ffmpeg_0.cvs20070307-5ubuntu7.1_powerpc.deb Size/MD5: 222746 edad10daceb46ec76c1cc75bd4a218d5
sparc architecture (Sun SPARC/UltraSPARC):
libavcodec-dev_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 1797086 87e64a466204e69220b40524a6cad862 libavcodec1d_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 1628922 3e4ecc4edba69d5946c10f4eea9c1ab9 libavformat-dev_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 340538 f0afcd90b412c6434457a7a37ee83eea libavformat1d_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 281118 b0ea1680c9c1bd7318bca0cea01e538a libavutil-dev_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 52262 5439184f6494a0a53d5b5aecb92d42c5 libavutil1d_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 40074 ebed2c6d472a1d61ab99fcf2d37a1384 libpostproc-dev_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 43232 19eccdbdc78f477ac09848eac0d53221 libpostproc1d_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 43148 edb0e4fbe7ec32d766b76aba5d2ef990 libswscale-dev_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 80030 e2ecf61b842f4357b50fddb1597422d6 libswscale1d_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 65136 c6164fe28a478b9493daaedf58678248 ffmpeg_0.cvs20070307-5ubuntu7.1_sparc.deb Size/MD5: 198336 01502ada60ef0f28299af16b65178236
--CE+1k2dSO48ffgeK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Kees Cook <kees@outflux.net>
iD8DBQFIjkV6H/9LqRcGPm0RAly2AJ961mKHbaWbxryugvfjIY+gOru73QCeMHpf Xf87hiz2M1W1aCOgvL3YAM0= =oQeo -----END PGP SIGNATURE-----
--CE+1k2dSO48ffgeK--
--===============1985435259144815243== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============1985435259144815243==--
|
|
|
|