CVE:CVE-2010-4704
CNNVD:CNNVD-201101-332
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。
FFmpeg 0.6.1及之前版本中的Vorbis解码器中的libavcodec/vorbis_dec.c中存在漏洞。远程攻击者可以借助特制的.ogg文件导致拒绝服务(应用程序崩溃)。该漏洞与vorbis_floor0_decode函数有关。
solution:Upgrade ffmpeg ffmpeg to a higher version than 0.6.1,0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9:pre1,0.5,0.6,and avoid the version (,0.6.1],0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9:pre1,0.5,0.6