Trusted Design

ffmpeg and Libav crossdomain information disclosure

概要

When a user opens a maliciously crafted playlist file in ffmpeg, ffmpeg will query a server for remote data. By carefully crafting the playlist, an attacker can cause ffmpeg to request internet URIs that expose file:// content from the victim's machine. CVE-2016-1897 refers to an issue with processing playlists that use concatenations, while CVE-2016-1898 refers to a related issue with subfiles.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• ffmpeg and Libav cross-domain information disclosure vuln (score: 0.98)
• A .NET malware abusing legitimate ffmpeg - Malwarebytes Labs | Malwarebytes Labs (score: 0.56)
• Security Advisory for Adobe Flash Player (score: 0.45)
• DirectRev Malvertising Uses Self Sufficient Flash 0Day (score: 0.45)
• Firefox CVE-2015-4495 exploitation (score: 0.43)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る