CVE:CVE-2008-3162
CNNVD:CNNVD-200807-222
FFmpeg是一套对音频和视频进行解码录制转换的完整的方案。
FFmpeg的libavformat/psxstr.c文件中的str_read_packet()函数存在堆溢出漏洞，如果用户受骗打开了恶意的STR文件的话，就可以触发这个溢出，导致执行任意指令。
solution:Upgrade ffmpeg ffmpeg to a higher version than 0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9,and avoid the version 0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9