VDB
CNVD-2017-12939
CNVD-2017-12939
PUBLISHED
Record from circl · Published June 28, 2017
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。 FFmpeg存在安全漏洞，该漏洞源于程序未能正确的限制HTTP Live Streaming文件名扩展和demuxer名。攻击者可借助特制的播放列表数据利用该漏洞读取任意文件。
Timeline
- Jun 28, 2017 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CNVD-2017-12939
vulnetix vdb fixes CNVD-2017-12939Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CNVD-2017-12939/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart