UBUNTU-CVE-2018-13305
Dashboard / Vulnerabilities / UBUNTU-CVE-2018-13305
Summary:
Details: In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.
References: https://ubuntu.com/security/CVE-2018-13305, https://www.cve.org/CVERecord?id=CVE-2018-13305
Affected packages
Package
Name: oxide-qt
Purl: pkg:deb/ubuntu/oxide-qt?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
1.9.5-0ubuntu1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
