This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2017-5047 →
UBUNTU-CVE-2017-5047
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attack...
Original description
The description as published by the source.
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Ubuntu:14.04:LTS
chromium-browser
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"58.0.3029.96-0ubuntu0.14.04.1174"}]}]
Ubuntu:16.04:LTS
oxide-qt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:16.04:LTS
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:18.04:LTS
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
References
- report ubuntu.com
- report chromereleases.googleblog.com
- report crbug.com
- report cve.org