This bug was fixed in the package vlc -
0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.3
---------------
vlc (0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.3) hardy-security;
urgency=low
* SECURITY UPDATE: aribrary code execution via invalid cue image file.
(LP: #294243)
- debian/patches/042_CVE-2008-5032.diff: make sure we don't overflow
p_sectors in modules/access/vcd/cdrom.c
- CVE-2008-5032
-- Marc Deslauriers <[email protected]> Sun, 28 Jun 2009
10:11:40 -0400
** Changed in: vlc (Ubuntu Hardy)
Status: Confirmed => Fix Released
--
Buffer overflow in CUE image support
https://bugs.launchpad.net/bugs/294243
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
--
universe-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/universe-bugs