CVE-2016-1897
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HL...
Original description
The description as published by the source.
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2016-1897 ffmpeg Fixed in: 7:2.8.5-1
References
- advisory debian.org
- advisory ubuntu.com
- advisory security.gentoo.org
- advisory security.gentoo.org
- report habrahabr.ru
- report security.stackexchange.com
- web lists.opensuse.org
- web openwall.com
- web securityfocus.com
- web securitytracker.com
- web slackware.com
- web kb.cert.org