Language Selection

English French German Italian Portuguese Spanish

Alleged critical holes in Xvid

Filed under
Security

According to reports from several security services, the Xvid 1.1.2 Video Codec Library has a security hole which attackers could use to gain control over a PC. For a successful attack, a victim only needs to open a prepared Xvid-AVI file with an application which makes calls to the library. Both Windows and Linux applications are affected.

The errors are located in the file mbcoding.c in the get_intra_block, get_inter_block_h263 and get_inter_block_mpeg functions. Array indexing errors can lead to an overrun which throws parts of the memory into confusion.

The problem is not restricted to AVI files alone but also affects all container formats such as MP4, Ogg and Matroska.

More Here.




More in Tux Machines

Security: Trezor, Kaspersky and Secure [sic] Enclave Processor

Android Leftovers

Linux-loving lecturer 'lost' email, was actually confused by Outlook

ON-CALL Friday means a few things at El Reg: a new BOFH. A couple of beers. And another instalment of On-Call, our weekly column in which we take reader-contributed tales of being asked to do horrible things for horrible people, scrub them up and hope you click. This week, meet “Newt” who a dozen or more years ago worked at a College that “decided to migrate from a Linux system to Microsoft Outlook with an Exchange back end.” Read more

Looks Like Debian GNU/Linux Runs on Quite a Few Mobile Devices, Including Pyra

Debian Project's W. Martin Borgert reports today that work on making the famous and widely-used Debian GNU/Linux operating system run on various mobile devices continues these days. Read more