Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 40.0.2214.85 (including) | |
| Supplementary for Red Hat Enterprise Linux 6 | RedHat | chromium-browser-0:40.0.2214.91-1.el6_6 | * |
| Chromium-browser | Ubuntu | artful | * |
| Chromium-browser | Ubuntu | bionic | * |
| Chromium-browser | Ubuntu | devel | * |
| Chromium-browser | Ubuntu | lucid | * |
| Chromium-browser | Ubuntu | precise | * |
| Chromium-browser | Ubuntu | trusty | * |
| Chromium-browser | Ubuntu | upstream | * |
| Chromium-browser | Ubuntu | utopic | * |
| Chromium-browser | Ubuntu | vivid | * |
| Chromium-browser | Ubuntu | wily | * |
| Chromium-browser | Ubuntu | xenial | * |
| Chromium-browser | Ubuntu | yakkety | * |
| Chromium-browser | Ubuntu | zesty | * |
| Ffmpeg | Ubuntu | lucid | * |
| Libav | Ubuntu | precise | * |
| Libav | Ubuntu | trusty | * |
| Libav | Ubuntu | upstream | * |
| Libav | Ubuntu | utopic | * |
| Libav | Ubuntu | vivid | * |
| Mplayer | Ubuntu | artful | * |
| Mplayer | Ubuntu | lucid | * |
| Mplayer | Ubuntu | precise | * |
| Mplayer | Ubuntu | yakkety | * |
| Mplayer | Ubuntu | zesty | * |
| Oxide-qt | Ubuntu | artful | * |
| Oxide-qt | Ubuntu | trusty | * |
| Oxide-qt | Ubuntu | upstream | * |
| Oxide-qt | Ubuntu | utopic | * |
| Oxide-qt | Ubuntu | vivid | * |
| Oxide-qt | Ubuntu | vivid/stable-phone-overlay | * |
| Oxide-qt | Ubuntu | wily | * |
| Oxide-qt | Ubuntu | xenial | * |
| Oxide-qt | Ubuntu | yakkety | * |
| Oxide-qt | Ubuntu | zesty | * |