SUSE CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

FAAD2前端decodeMP4file()函数堆溢出漏洞

BUGTRAQ ID: 31219 FAAD2是开放源码的MPEG-4和MPEG-2 AAC解码器。 FAAD2的faad2/frontend/main.c文件中的decodeMP4file函数在读取解码器库所返回缓冲区的数据时存在堆溢出漏洞，如果用户通过命令行前端处理了恶意文件的话，就可以触发这个溢出，导致拒绝服务或执行任意指令。 AudioCoding FAAD2 2.6 AudioCoding ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.audiocoding.com/patch/mainoverflow.dif...