FFmpeg Information Disclosure Vulnerability (CVE-2016-1897)

FFmpeg Information Disclosure Vulnerability (CVE-2016-1897)
FFmpeg Information Disclosure Vulnerability (CVE-2016-1897)

Release date:
Updated on:

Affected Systems:

FFmpeg 2.x

Description:

CVE (CAN) ID: CVE-2016-1897

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

FFmpeg 2.x has a security vulnerability in implementation. Through the HLS real-time stream (HLS) M3U8 file sub-file protocol, remote attackers can exploit this vulnerability to perform cross-source attacks and obtain Arbitrary File Information.

<* Source: FFmpeg
*>

Suggestion:

Vendor patch:

FFmpeg
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://ffmpeg.org/security.html

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg

Install FFMPEG on CentOS 5.6

Install FFmpeg in Ubuntu

Compile ffmpeg in Ubuntu 12.04

Install FFmpeg 2.2.2 In PPA in Ubuntu 14.04

FFmpeg details: click here
FFmpeg: click here

This article permanently updates the link address: