Rhythmbox

  1. Bug #235829
  2. Comment #12

Comment 12 for bug 235829

Revision history for this message
Till Ulen (tillulen) wrote : Security implications of this crash

On Fri, Jun 27, 2008 at 23:08, Kees Cook wrote:
>
> Thanks for the bug report. This is actually not a security problem, but
> rather an unusual looking crash in the heap, and has already been
> reported. I am marking this as a duplicate. Please feel free to report
> any other issues you might find.

Kees, thanks for your comment.

Do you mean it is not exploitable so that arbitrary code execution is
impossible?

If a user opens a malicious playlist file, the worst that can happen
is that her Rhythmbox would just crash. Is that correct?

References:
https://bugs.launchpad.net/ubuntu/+source/rhythmbox/+bug/243488 (duplicate)
https://bugs.launchpad.net/ubuntu/+source/rhythmbox/+bug/235829