Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1015-1
Solution
Please Install the Updated Packages.
Insight
Christoph Diehl discovered that libvpx did not properly perform bounds checking. If an application using libvpx opened a specially crafted WebM file, an attacker could cause a denial of service or possibly execute code as the user invoking the program.
Affected
libvpx vulnerability on Ubuntu 10.10
Severity
Classification
-
CVE CVE-2010-4203 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities