From Mageia wiki
Jump to: navigation, search

MGASA-2012-0204

Date: August 6th, 2012
Affected releases: 1


Description:
Updated avidemux packages fix security vulnerabilities:

denial of service and possible code execution via malformed stream for
the vorbis decoder and matroska demuxer (CVE-2011-3893, CVE-2011-3895)

nsvdec: Fix use of uninitialized streams, Be more careful with
av_malloc(), nsvdec: Propagate errors (CVE-2011-3940)

dv: Fix small stack overread, check stype, Fix null pointer
dereference due to ach=0 (CVE-2011-3929 and CVE-2011-3936)

atrac3: Fix crash in tonal component decoding (CVE-2012-0853)

mjpegbdec: Fix overflow in SOS (CVE-2011-3947)

kgv1dec: Increase offsets array size so it is large enough
(CVE-2011-3945)

vqavideo: return error if image size is not a multiple of block size
(CVE-2012-0947)

dpcm: ignore extra unpaired bytes in stereo streams (CVE-2011-3951)

aacsbr: prevent out of bounds memcpy() (CVE-2012-0850)

h264: Add check for invalid chroma_format_idc (CVE-2012-0851)

adpcm: ADPCM Electronic Arts has always two channels (CVE-2012-0852)

shorten: Use separate pointers for the allocated memory for decoded
samples, check for realloc failure (CVE-2012-0858)

kmvc: Check palsize (CVE-2011-3952)


Updated Packages:
avidemux-2.5.4-5.3.mga1
avidemux-cli-2.5.4-5.3.mga1
avidemux-gtk-2.5.4-5.3.mga1
avidemux-qt-2.5.4-5.3.mga1


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3893
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3895
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3929
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3936
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3940
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3945
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3947
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3951
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3952
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0850
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0851
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0852
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0853
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0947
https://bugs.mageia.org/show_bug.cgi?id=6955