CVE-2017-9993 in FFmpeg
摘要 (英语)
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data.
预定
2017-06-28
披露
2017-06-28
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 102891 | FFmpeg HTTP Live Streaming Filename Extension Name 信息公开 | 200 | 未定义 | 官方修复 | CVE-2017-9993 |