CVE-2014-7933
Publication date 22 January 2015
Last updated 24 July 2024
Ubuntu priority
Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
Status
Package | Ubuntu Release | Status |
---|---|---|
chromium-browser | 18.04 LTS bionic |
Fixed 40.0.2214.94-0ubuntu1.1120
|
16.04 LTS xenial |
Fixed 40.0.2214.94-0ubuntu1.1120
|
|
14.04 LTS trusty |
Fixed 40.0.2214.94-0ubuntu0.14.04.1.1068
|
|
ffmpeg | 18.04 LTS bionic |
Not affected
|
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |
libav | 18.04 LTS bionic | Not in release |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty |
Fixed 6:9.20-0ubuntu0.14.04.1
|
|
mplayer | 18.04 LTS bionic |
Not affected
|
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty |
Not affected
|
|
oxide-qt | 18.04 LTS bionic | Not in release |
16.04 LTS xenial |
Fixed 1.4.2-0ubuntu1
|
|
14.04 LTS trusty |
Fixed 1.4.2-0ubuntu0.14.04.1
|
|
Patch details
Package | Patch details |
---|---|
ffmpeg | |
libav |
References
Related Ubuntu Security Notices (USN)
- USN-2476-1
- Oxide vulnerabilities
- 26 January 2015