PT-2014-9134 · FFmpeg+2 · Ffmpeg+2

Published 2014-07-26 · Updated 2014-07-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Avidemux versions prior to the update with FFmpeg 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4

Description The issue concerns security vulnerabilities in Avidemux, which is built with a bundled set of FFmpeg libraries. The vulnerabilities have been fixed by updating the bundled FFmpeg versions. Additional patches from the FFmpeg 0.10 branch were added to fix specific issues, including a use after free in matroska and integer overflows in lzo.

Recommendations For Avidemux in Mageia 3, update the bundled FFmpeg libraries to version 0.9.4. For Avidemux in Mageia 4, update the bundled FFmpeg libraries to version 1.2.7.

Related Identifiers

MGASA-2014-0297

Affected Products

Avidemux

Ffmpeg

Mageia

References · 4

• https://osv.dev/vulnerability/MGASA-2014-0297 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0297.html · Security Note
• http://ffmpeg.org/security.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=13643 · Note