CVE-2016-7972

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-12/msg00068.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/10/05/2 · Mailing List
• securityfocus.com/bid/93358 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• libass/libass#240 · Issue Tracking
• libass/libass release 0.13.4 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KW6DNERYHPI5Y6SQYU3XKTVSCOWMIHUC
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7JJ2SGVOX6UQQIRMVC3QACJLKHE2PYN
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUOUOK3VULMMZTNSCRFCNPDAPDWAVK7X
• security.gentoo.org/glsa/201702-25 · Patch

libass のその他の脆弱性

• CVE-2020-36430高 7.8libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong in…
• CVE-2020-24994高 8.8Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service …
• CVE-2020-26682高 8.8In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.
• CVE-2016-7970高 7.5Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service…
• CVE-2016-7969高 7.5The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds re…