Technical Description

Mandriva has released updated packages to address multiple vulnerabilities identified in Gstreamer-ffmpeg. These flaws could be exploited by attackers to execute arbitrary commands or cause a denial of service. For additional information, see : VUPEN/ADV-2005-2770

Affected Products

Mandriva Linux 2007.0
Mandriva Linux 2006.0

Solution

Upgrade the affected packages :

Mandriva Linux 2006.0:
c49b397719d1143231cb030f9e9cd003 2006.0/i586/gstreamer-ffmpeg-0.8.6-1.2.20060mdk.i586.rpm
a0afe9ef876a409ca594b4fdb75921ad 2006.0/SRPMS/gstreamer-ffmpeg-0.8.6-1.2.20060mdk.src.rpm

Mandriva Linux 2006.0/X86_64:
03003e5d2ee3f613a7ccd9552fdc7124 2006.0/x86_64/gstreamer-ffmpeg-0.8.6-1.2.20060mdk.x86_64.rpm
a0afe9ef876a409ca594b4fdb75921ad 2006.0/SRPMS/gstreamer-ffmpeg-0.8.6-1.2.20060mdk.src.rpm

Mandriva Linux 2007.0:
884a134c1ded68502a461754b51dce85 2007.0/i586/gstreamer-ffmpeg-0.8.7-3.1mdv2007.0.i586.rpm
d30f67740f6f6b9769609e613fd44b59 2007.0/SRPMS/gstreamer-ffmpeg-0.8.7-3.1mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
90b711e579e72a96441b16b5e38bb5ff 2007.0/x86_64/gstreamer-ffmpeg-0.8.7-3.1mdv2007.0.x86_64.rpm
d30f67740f6f6b9769609e613fd44b59 2007.0/SRPMS/gstreamer-ffmpeg-0.8.7-3.1mdv2007.0.src.rpm

References

http://www.vupen.com/english/advisories/2006/3827
http://archives.mandrivalinux.com/security-announce/2006-09/msg00020.php

ChangeLog

2006-09-29 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.