Summary
The remote host is missing an update to ffmpeg
announced via advisory MDVSA-2009:335.
Solution
To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2009:335
Insight
A vulnerability was discovered and corrected in ffmpeg:
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac
or (2) a malformed Ogg Media (OGM) file, as
demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718 (CVE-2008-4610).
Packages for 2008.0 are being provided due to extended support for Corporate products.
This update provides a solution to this vulnerability.
Affected: 2008.0, 2009.0, Enterprise Server 5.0
Severity
Classification
-
CVE CVE-2007-6718, CVE-2008-4610 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities