Lucene search

DebianDEBIAN:DSA-1543-1:1F259

HistoryApr 09, 2008 - 7:26 p.m.

[SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities

2008-04-0919:26:06

lists.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.722 High

EPSS

Percentile

98.1%

JSON

Debian Security Advisory DSA-1543-1 [email protected]
http://www.debian.org/security/ Devin Carraway
April 09, 2008 http://www.debian.org/security/faq

Package : vlc
Vulnerability : multiple
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2007-6681 CVE-2007-6682 CVE-2007-6683 CVE-2008-0295
CVE-2008-0296 CVE-2008-0073 CVE-2008-0984 CVE-2008-1489

Luigi Auriemma, Alin Rad Pop, RÃ©mi Denis-Courmont, Quovodis, Guido
Landi, Felipe Manzano, Anibal Sacco and others discovered multiple
vulnerabilities in vlc, an application for playback and streaming of
audio and video. In the worst case, these weaknesses permit a remote,
unauthenticated attacker to execute arbitrary code with the privileges
of the user running vlc.

The Common Vulnerabilities and Exposures project identifies the
following eight problems:

CVE-2007-6681

A buffer overflow vulnerability in subtitle handling allows an
attacker to execute arbitrary code through the opening of a
maliciously crafted MicroDVD, SSA or Vplayer file.

CVE-2007-6682

A format string vulnerability in the HTTP-based remote control
facility of the vlc application allows a remote, unauthenticated
attacker to execute arbitrary code.

CVE-2007-6683

Insecure argument validation allows a remote attacker to overwrite
arbitrary files writable by the user running vlc, if a maliciously
crafted M3U playlist or MP3 audio file is opened.

CVE-2008-0295, CVE-2008-0296

Heap buffer overflows in RTSP stream and session description
protocol (SDP) handling allow an attacker to execute arbitrary
code if a maliciously-crafted RTSP stream is played.

CVE-2008-0073

Insufficient integer bounds checking in SDP handling allows the
execution of arbitrary code through a maliciously crafted SDP
stream ID parameter in an RTSP stream.

CVE-2008-0984

Insufficient integrity checking in the MP4 demuxer allows a remote
attacker to overwrite arbitrary memory and execute arbitrary code
if a maliciously-crafted MP4 file is opened.

CVE-2008-1489

An integer overflow vulnerability in MP4 handling allows a remote
attacker to cause a heap buffer overflow, inducing a crash and
possibly the execution of arbitrary code if a maliciously-crafted
MP4 file is opened.

For the stable distribution (etch), these problems have been fixed in
version 0.8.6-svn20061012.debian-5.1+etch2.

For the unstable distribution (sid), these problems have been fixed in
version 0.6.8.e-2.

We recommend that you upgrade your vlc packages.

Upgrade instructions

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian 4.0 (stable)

Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn20061012.debian-5.1+etch2.diff.gz
Size/MD5 checksum: 2383751 4429c3a0764cadf7bdcb67a90bdd5cac
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn20061012.debian.orig.tar.gz
Size/MD5 checksum: 15168393 30c18a2fdc4105606033ff6e6aeab81c
http://security.debian.org/pool/updates/main/v/vlc/vlc_0.8.6-svn20061012.debian-5.1+etch2.dsc
Size/MD5 checksum: 2614 6337a0f1aa8c1f4b1a98648d66c55c7f

Architecture independent packages:

http://security.debian.org/pool/updates/main/v/vlc/vlc-plugin-alsa_0.8.6-svn20061012.debian-5.1+etch2_all.deb
Size/MD5 checksum: 784 0eb16d5cb4300c269d767d8efcf6fd56
http://security.debian.org/pool/updates/main/v/vlc/wxvlc_0.8.6-svn20061012.debian-5.1+etch2_all.deb
Size/MD5 checksum: 778 6e2045ca43d51b8d8651640405c6e501

alpha architecture (DEC Alpha)

amd64 architecture (AMD x86_64 (AMD64))

arm architecture (ARM)

hppa architecture (HP PA RISC)

i386 architecture (Intel ia32)

ia64 architecture (Intel ia64)

mips architecture (MIPS (Big Endian))

mipsel architecture (MIPS (Little Endian))

powerpc architecture (PowerPC)

s390 architecture (IBM S/390)

sparc architecture (Sun SPARC/UltraSPARC)

These files will probably be moved into the stable distribution on
its next update.

For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: [email protected]
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

OSVersionArchitecturePackageVersionFilename
Debian4s390mozilla-plugin-vlc< 0.8.6-svn20061012.debian-5.1+etch2mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
Debian4hppavlc-plugin-arts< 0.8.6-svn20061012.debian-5.1+etch2vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
Debian4ia64libvlc0-dev< 0.8.6-svn20061012.debian-5.1+etch2libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
Debian4mipselmozilla-plugin-vlc< 0.8.6-svn20061012.debian-5.1+etch2mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
Debian4sparclibvlc0< 0.8.6-svn20061012.debian-5.1+etch2libvlc0_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
Debian4ia64vlc-plugin-esd< 0.8.6-svn20061012.debian-5.1+etch2vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
Debian4ia64vlc-plugin-ggi< 0.8.6-svn20061012.debian-5.1+etch2vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
Debian4mipsvlc-plugin-sdl< 0.8.6-svn20061012.debian-5.1+etch2vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
Debian4s390vlc-plugin-sdl< 0.8.6-svn20061012.debian-5.1+etch2vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
Debian4i386vlc-plugin-ggi< 0.8.6-svn20061012.debian-5.1+etch2vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	4	s390	mozilla-plugin-vlc	< 0.8.6-svn20061012.debian-5.1+etch2	mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
Debian	4	hppa	vlc-plugin-arts	< 0.8.6-svn20061012.debian-5.1+etch2	vlc-plugin-arts_0.8.6-svn20061012.debian-5.1+etch2_hppa.deb
Debian	4	ia64	libvlc0-dev	< 0.8.6-svn20061012.debian-5.1+etch2	libvlc0-dev_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
Debian	4	mipsel	mozilla-plugin-vlc	< 0.8.6-svn20061012.debian-5.1+etch2	mozilla-plugin-vlc_0.8.6-svn20061012.debian-5.1+etch2_mipsel.deb
Debian	4	sparc	libvlc0	< 0.8.6-svn20061012.debian-5.1+etch2	libvlc0_0.8.6-svn20061012.debian-5.1+etch2_sparc.deb
Debian	4	ia64	vlc-plugin-esd	< 0.8.6-svn20061012.debian-5.1+etch2	vlc-plugin-esd_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
Debian	4	ia64	vlc-plugin-ggi	< 0.8.6-svn20061012.debian-5.1+etch2	vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_ia64.deb
Debian	4	mips	vlc-plugin-sdl	< 0.8.6-svn20061012.debian-5.1+etch2	vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_mips.deb
Debian	4	s390	vlc-plugin-sdl	< 0.8.6-svn20061012.debian-5.1+etch2	vlc-plugin-sdl_0.8.6-svn20061012.debian-5.1+etch2_s390.deb
Debian	4	i386	vlc-plugin-ggi	< 0.8.6-svn20061012.debian-5.1+etch2	vlc-plugin-ggi_0.8.6-svn20061012.debian-5.1+etch2_i386.deb