This script is Copyright (C) 2007-2015 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200708-02
(Xvid: Array indexing vulnerabilities)
Trixter Jack discovered an array indexing error in the
get_intra_block() function in the file src/bitstream/mbcoding.c. The
get_inter_block_h263() and get_inter_block_mpeg() functions in the same
file were also reported as vulnerable.
An attacker could exploit these vulnerabilities to execute arbitrary
code by tricking a user or automated system into processing a malicious
video file with an application that makes use of the Xvid library.
There is no known workaround at this time.
See also :
All Xvid users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=media-libs/xvid-1.1.3'
Risk factor :
Medium / CVSS Base Score : 6.8
Family: Gentoo Local Security Checks
Nessus Plugin ID: 25867 (gentoo_GLSA-200708-02.nasl)
CVE ID: CVE-2007-3329
Upgrade to Nessus Professional today!
Start your free Nessus Cloud trial now!
Begin Free Trial
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.