Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-1897
4.3
MEDIUMCVSS v2
Published
January 15, 2016
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
FFmpeg/FFmpeg
GitHubMirror of https://git.ffmpeg.org/ffmpeg.git
GitHubMirror of https://git.ffmpeg.org/ffmpeg.git= 2.2.12, = 2.4.11, = 2.3, = 2.6.3, = 2.2.8, = 2.3.3, = 2.4.4, = 2.0.7, = 2.2, = 2.6.2, = 2.5.4, = 2.4.9, = 2.2.15, = 2.8.4, = 2.7.1, = 2.4.6, = 2.3.5, = 2.2.6, = 2.2.4, = 2.1.6, = 2.6.6, = 2.2.3, = 2.0.4, = 2.5.6, = 2.4.10, = 2.4.1, = 2.2.1, = 2.7.4, = 2.7.3, = 2.4.8, = 2.3.6, = 2.1.8, = 2.1.7, = 2.0, = 2.8.3, = 2.7.2, = 2.6, = 2.5.9, = 2.4.7, = 2.2.14, = 2.1.5, = 2.8.2, = 2.8.1, = 2.7, = 2.6.5, = 2.5.8, = 2.5, = 2.4.5, = 2.4.3, = 2.3.2, = 2.2.11, = 2.1.4, = 2.1.3, = 2.0.3, = 2.8, = 2.6.4, = 2.5.5, = 2.4.2, = 2.2.9, = 2.1.1, = 2.0.2, = 2.0.1, = 2.6.1, = 2.5.3, = 2.4, = 2.2.16, = 2.2.7, = 2.1, = 2.5.2, = 2.5.1, = 2.3.4, = 2.2.13, = 2.2.5, = 2.0.6, = 2.0.5, = 2.5.7, = 2.4.12, = 2.2.2, = 2.3.1, = 2.2.10, = 2.1.2NVD
ffmpeg
NPMUtility for managing video streams using ffmpeg
NPMUtility for managing video streams using ffmpeg= 2.2.12, = 2.4.11, = 2.3, = 2.6.3, = 2.2.8, = 2.3.3, = 2.4.4, = 2.0.7, = 2.2, = 2.6.2, = 2.5.4, = 2.4.9, = 2.2.15, = 2.8.4, = 2.7.1, = 2.4.6, = 2.3.5, = 2.2.6, = 2.2.4, = 2.1.6, = 2.6.6, = 2.2.3, = 2.0.4, = 2.5.6, = 2.4.10, = 2.4.1, = 2.2.1, = 2.7.4, = 2.7.3, = 2.4.8, = 2.3.6, = 2.1.8, = 2.1.7, = 2.0, = 2.8.3, = 2.7.2, = 2.6, = 2.5.9, = 2.4.7, = 2.2.14, = 2.1.5, = 2.8.2, = 2.8.1, = 2.7, = 2.6.5, = 2.5.8, = 2.5, = 2.4.5, = 2.4.3, = 2.3.2, = 2.2.11, = 2.1.4, = 2.1.3, = 2.0.3, = 2.8, = 2.6.4, = 2.5.5, = 2.4.2, = 2.2.9, = 2.1.1, = 2.0.2, = 2.0.1, = 2.6.1, = 2.5.3, = 2.4, = 2.2.16, = 2.2.7, = 2.1, = 2.5.2, = 2.5.1, = 2.3.4, = 2.2.13, = 2.2.5, = 2.0.6, = 2.0.5, = 2.5.7, = 2.4.12, = 2.2.2, = 2.3.1, = 2.2.10, = 2.1.2
Crates.io
RubyGems