ffmpeg and Libav cross-domain information disclosure vulnerability. Improper domain restrictions lead to remote data query and local file exposure
Reporter | Title | Published | Views | Family All 40 |
---|---|---|---|---|
![]() | ffmpeg -- remote attacker can access local files | 13 Jan 201600:00 | β | freebsd |
![]() | Security update for ffmpeg (important) | 25 Jan 201622:11 | β | suse |
![]() | openSUSE Security Update : ffmpeg (openSUSE-2016-94) | 27 Jan 201600:00 | β | nessus |
![]() | Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : MPlayer (SSA:2016-034-02) | 4 Feb 201600:00 | β | nessus |
![]() | FreeBSD : ffmpeg -- remote attacker can access local files (046fedd1-bd01-11e5-bbf4-5404a68ad561) | 19 Jan 201600:00 | β | nessus |
![]() | Debian DSA-3506-1 : libav - security update | 7 Mar 201600:00 | β | nessus |
![]() | GLSA-201705-08 : libav: Multiple vulnerabilities | 10 May 201700:00 | β | nessus |
![]() | GLSA-201606-09 : FFmpeg: Multiple vulnerabilities | 20 Jun 201600:00 | β | nessus |
![]() | Ubuntu 12.04 LTS : libav vulnerabilities (USN-2944-1) | 5 Apr 201600:00 | β | nessus |
![]() | Pornhub: [ssrf] libav vulnerable during conversion of uploaded videos | 17 Jan 201615:36 | β | hackerone |
Source | Link |
---|---|
habrahabr | www.habrahabr.ru/company/mailru/blog/274855 |
openwall | www.openwall.com/lists/oss-security/2016/01/14/1 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo