CVE-2017-9993 in FFmpeg
Resumen (Inglés)
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data.
Reservar
2017-06-28
Divulgación
2017-06-28
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 102891 | FFmpeg HTTP Live Streaming Filename Extension Name divulgación de información | 200 | No está definido | Arreglo oficial | CVE-2017-9993 |