p PatchFirst

CVE-2017-5025

CVE-2017-5025

This page contains facts from public vulnerability sources. Check the original advisory before updating.

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.

CVSS 5.5 · Medium · EPSS 1.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • google chrome prior to 56.0.2924.76 for linux, windows and mac

    Versions
    • Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac: Affected

    No fix published

  • ffmpeg Debian:12

    Affected ranges
    • ECOSYSTEM: < 7:3.2.4-1

    Update to 7:3.2.4-1

  • ffmpeg Debian:13

    Affected ranges
    • ECOSYSTEM: < 7:3.2.4-1

    Update to 7:3.2.4-1

  • ffmpeg Debian:14

    Affected ranges
    • ECOSYSTEM: < 7:3.2.4-1

    Update to 7:3.2.4-1

  • chromium-browser Ubuntu:14.04:LTS

    Versions
    • 29.0.1547.65-0ubuntu2
    • 31.0.1650.63-0ubuntu1~20131204.1
    • 32.0.1700.107-0ubuntu1~20140204.977.1
    • 33.0.1750.152-0ubuntu1~pkg995.1
    • 34.0.1847.116-0ubuntu2
    • 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
    • 37.0.2062.94-0ubuntu0.14.04.1~pkg1042
    • 37.0.2062.120-0ubuntu0.14.04.1~pkg1049
    • 38.0.2125.111-0ubuntu0.14.04.1.1061
    • 39.0.2171.65-0ubuntu0.14.04.1.1064
    • 40.0.2214.94-0ubuntu0.14.04.1.1068
    • 40.0.2214.111-0ubuntu0.14.04.1.1069
    • 41.0.2272.76-0ubuntu0.14.04.1.1076
    • 43.0.2357.81-0ubuntu0.14.04.1.1089
    • 43.0.2357.130-0ubuntu0.14.04.1.1092
    • 44.0.2403.89-0ubuntu0.14.04.1.1095
    • 45.0.2454.85-0ubuntu0.14.04.1.1097
    • 45.0.2454.101-0ubuntu0.14.04.1.1099
    • 47.0.2526.73-0ubuntu0.14.04.1.1106
    • 47.0.2526.106-0ubuntu0.14.04.1.1107
    • 48.0.2564.82-0ubuntu0.14.04.1.1108
    • 48.0.2564.116-0ubuntu0.14.04.1.1111
    • 49.0.2623.87-0ubuntu0.14.04.1.1112
    • 49.0.2623.108-0ubuntu0.14.04.1.1113
    • 50.0.2661.102-0ubuntu0.14.04.1.1117
    • 51.0.2704.79-0ubuntu0.14.04.1.1121
    • 52.0.2743.116-0ubuntu0.14.04.1.1134
    • 53.0.2785.143-0ubuntu0.14.04.1.1142
    • 53.0.2785.143-0ubuntu0.14.04.1.1145
    Affected ranges
    • ECOSYSTEM: < 58.0.3029.81-0ubuntu0.14.04.1172

    Update to 58.0.3029.81-0ubuntu0.14.04.1172

  • oxide-qt Ubuntu:14.04:LTS

    Versions
    • 1.0.0~bzr437-0ubuntu1
    • 1.0.0~bzr452-0ubuntu1
    • 1.0.0~bzr475-0ubuntu1
    • 1.0.0~bzr490-0ubuntu1
    • 1.0.0~bzr501-0ubuntu1
    • 1.0.0~bzr501-0ubuntu2
    • 1.0.4-0ubuntu0.14.04.1
    • 1.0.5-0ubuntu0.14.04.1
    • 1.1.2-0ubuntu0.14.04.1
    • 1.2.5-0ubuntu0.14.04.1
    • 1.3.4-0ubuntu0.14.04.1
    • 1.4.2-0ubuntu0.14.04.1
    • 1.4.3-0ubuntu0.14.04.1
    • 1.5.5-0ubuntu0.14.04.3
    • 1.5.6-0ubuntu0.14.04.2
    • 1.6.5-0ubuntu0.14.04.1
    • 1.6.6-0ubuntu0.14.04.1
    • 1.7.8-0ubuntu0.14.04.1
    • 1.7.9-0ubuntu0.14.04.1
    • 1.8.4-0ubuntu0.14.04.2
    • 1.9.1-0ubuntu0.14.04.2
    • 1.9.5-0ubuntu0.14.04.1
    • 1.10.3-0ubuntu0.14.04.1
    • 1.11.3-0ubuntu0.14.04.1
    • 1.11.4-0ubuntu0.14.04.1
    • 1.12.5-0ubuntu0.14.04.1
    • 1.12.6-0ubuntu0.14.04.1
    • 1.12.7-0ubuntu0.14.04.1
    • 1.13.6-0ubuntu0.14.04.1
    • 1.14.7-0ubuntu0.14.04.1
    • 1.14.9-0ubuntu0.14.04.1
    • 1.15.7-0ubuntu0.14.04.1
    • 1.15.8-0ubuntu0.14.04.1
    • 1.16.5-0ubuntu0.14.04.1
    • 1.17.7-0ubuntu0.14.04.1
    • 1.17.9-0ubuntu0.14.04.1
    • 1.18.3-0ubuntu0.14.04.1
    • 1.18.5-0ubuntu0.14.04.1
    • 1.19.4-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 1.20.4-0ubuntu0.14.04.1

    Update to 1.20.4-0ubuntu0.14.04.1

  • chromium-browser Ubuntu:16.04:LTS

    Versions
    • 45.0.2454.101-0ubuntu1.1201
    • 47.0.2526.73-0ubuntu1.1218
    • 47.0.2526.106-0ubuntu1.1221
    • 48.0.2564.82-0ubuntu1.1222
    • 48.0.2564.116-0ubuntu1.1229
    • 49.0.2623.87-0ubuntu1.1232
    • 49.0.2623.108-0ubuntu1.1233
    • 50.0.2661.102-0ubuntu0.16.04.1.1237
    • 51.0.2704.79-0ubuntu0.16.04.1.1242
    • 52.0.2743.116-0ubuntu0.16.04.1.1250
    • 53.0.2785.143-0ubuntu0.16.04.1.1254
    • 53.0.2785.143-0ubuntu0.16.04.1.1257
    • 55.0.2883.87-0ubuntu0.16.04.1263
    Affected ranges
    • ECOSYSTEM: < 56.0.2924.76-0ubuntu0.16.04.1268

    Update to 56.0.2924.76-0ubuntu0.16.04.1268

  • ffmpeg Ubuntu:16.04:LTS

    Versions
    • 7:2.7.2-1build1
    • 7:2.8.1-1ubuntu1
    • 7:2.8.2-1ubuntu1
    • 7:2.8.3-1
    • 7:2.8.4-1
    • 7:2.8.4-1ubuntu1
    • 7:2.8.4-1ubuntu2
    • 7:2.8.4-1ubuntu3
    • 7:2.8.4-1ubuntu4
    • 7:2.8.6-1ubuntu1
    • 7:2.8.6-1ubuntu2
    • 7:2.8.8-0ubuntu0.16.04.1
    • 7:2.8.10-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 7:2.8.11-0ubuntu0.16.04.1

    Update to 7:2.8.11-0ubuntu0.16.04.1

  • oxide-qt Ubuntu:16.04:LTS

    Versions
    • 1.9.5-0ubuntu1
    • 1.10.3-0ubuntu0.15.10.1
    • 1.10.3-0ubuntu0.15.10.2
    • 1.11.3-0ubuntu3
    • 1.11.4-0ubuntu1
    • 1.11.5-0ubuntu1
    • 1.12.5-0ubuntu1
    • 1.12.6-0ubuntu1
    • 1.12.7-0ubuntu1
    • 1.13.6-0ubuntu1
    • 1.14.7-0ubuntu1
    • 1.14.9-0ubuntu0.16.04.1
    • 1.15.7-0ubuntu0.16.04.1
    • 1.15.8-0ubuntu0.16.04.1
    • 1.16.5-0ubuntu0.16.04.1
    • 1.17.7-0ubuntu0.16.04.1
    • 1.17.9-0ubuntu0.16.04.1
    • 1.18.3-0ubuntu0.16.04.1
    • 1.18.5-0ubuntu0.16.04.1
    • 1.19.4-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 1.20.4-0ubuntu0.16.04.1

    Update to 1.20.4-0ubuntu0.16.04.1

Original sources

Check your server →