CVE:CVE-2018-7752
CNNVD:CNNVD-201803-185
GPAC是一套开源的多媒体框架。
GPAC 0.7.1及之前版本中的media_tools/av_parsers.c文件的‘gf_media_avc_read_sps’函数存在缓冲区溢出漏洞。攻击者可利用该漏洞覆盖glibc堆的内存块。
solution:Upgrade gpac gpac to a higher version than 0.7.1,and avoid the version (,0.7.1]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10