UBUNTU-CVE-2015-3395

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2015-3395

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-3395.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-3395

Upstream

CVE-2015-3395

Related

USN-2944-1

Published

2015-06-16T00:00:00Z

Modified

2026-02-04T02:18:28.294248Z

Severity

Ubuntu - low

Summary

[none]

Details

The msrledecodepal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access.

References

Affected packages

Ubuntu:14.04:LTS / chromium-browser

Package

Name: chromium-browser
Purl: pkg:deb/ubuntu/chromium-browser@47.0.2526.73-0ubuntu0.14.04.1.1106?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

47.0.2526.73-0ubuntu0.14.04.1.1106

Affected versions

29.*

29.0.1547.65-0ubuntu2

31.*

31.0.1650.63-0ubuntu1~20131204.1

32.*

32.0.1700.107-0ubuntu1~20140204.977.1

33.*

33.0.1750.152-0ubuntu1~pkg995.1

34.*

34.0.1847.116-0ubuntu2

36.*

36.0.1985.125-0ubuntu1.14.04.0~pkg1029

37.*

37.0.2062.94-0ubuntu0.14.04.1~pkg1042

37.0.2062.120-0ubuntu0.14.04.1~pkg1049

38.*

38.0.2125.111-0ubuntu0.14.04.1.1061

39.*

39.0.2171.65-0ubuntu0.14.04.1.1064

40.*

40.0.2214.94-0ubuntu0.14.04.1.1068

40.0.2214.111-0ubuntu0.14.04.1.1069

41.*

41.0.2272.76-0ubuntu0.14.04.1.1076

43.*

43.0.2357.81-0ubuntu0.14.04.1.1089

43.0.2357.130-0ubuntu0.14.04.1.1092

44.*

44.0.2403.89-0ubuntu0.14.04.1.1095

45.*

45.0.2454.85-0ubuntu0.14.04.1.1097

45.0.2454.101-0ubuntu0.14.04.1.1099

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "47.0.2526.73-0ubuntu0.14.04.1.1106",
            "binary_name": "chromium-browser"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu0.14.04.1.1106",
            "binary_name": "chromium-browser-l10n"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu0.14.04.1.1106",
            "binary_name": "chromium-chromedriver"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu0.14.04.1.1106",
            "binary_name": "chromium-codecs-ffmpeg"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu0.14.04.1.1106",
            "binary_name": "chromium-codecs-ffmpeg-extra"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-3395.json"

Ubuntu:Pro:14.04:LTS / libav

Package

Name: libav
Purl: pkg:deb/ubuntu/libav@6:9.20-0ubuntu0.14.04.1+esm1?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6:9.20-0ubuntu0.14.04.1+esm1

Affected versions

6:0.*

6:0.8.7-1ubuntu2

6:9.*

6:9.10-1ubuntu1

6:9.10-1ubuntu2

6:9.10-1ubuntu5

6:9.10-1ubuntu6

6:9.10-1ubuntu7

6:9.11-2ubuntu1

6:9.11-2ubuntu2

6:9.13-0ubuntu0.14.04.1

6:9.14-0ubuntu0.14.04.1

6:9.16-0ubuntu0.14.04.1

6:9.18-0ubuntu0.14.04.1

6:9.20-0ubuntu0.14.04.1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libav-tools"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavcodec-dev"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavcodec-extra"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavcodec-extra-54"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavcodec54"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavdevice-dev"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavdevice-extra-53"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavdevice53"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavfilter-dev"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavfilter-extra-3"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavfilter3"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavformat-dev"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavformat-extra-54"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavformat54"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavresample-dev"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavresample1"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavutil-dev"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavutil-extra-52"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libavutil52"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libswscale-dev"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libswscale-extra-2"
        },
        {
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1",
            "binary_name": "libswscale2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-3395.json"

Ubuntu:16.04:LTS / chromium-browser

Package

Name: chromium-browser
Purl: pkg:deb/ubuntu/chromium-browser@47.0.2526.73-0ubuntu1.1218?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

47.0.2526.73-0ubuntu1.1218

Affected versions

45.*

45.0.2454.101-0ubuntu1.1201

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "47.0.2526.73-0ubuntu1.1218",
            "binary_name": "chromium-browser"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu1.1218",
            "binary_name": "chromium-browser-l10n"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu1.1218",
            "binary_name": "chromium-chromedriver"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu1.1218",
            "binary_name": "chromium-codecs-ffmpeg"
        },
        {
            "binary_version": "47.0.2526.73-0ubuntu1.1218",
            "binary_name": "chromium-codecs-ffmpeg-extra"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-3395.json"