NVD

Id
87442  
Name
CVE-2017-9993  
Description
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-28  
Modified Date
2017-07-05  
Seq
2017-9993  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
426307 87442 CVE-2017-0640 98868  View
426308 87442 CVE-2017-0640 https://source.android.com/security/bulletin/2017-06-01  View
426309 87442 CVE-2017-0640 98868  View
426310 87442 CVE-2017-0640 https://source.android.com/security/bulletin/2017-06-01  View
426311 87442 CVE-2017-0640 98868  View
426312 87442 CVE-2017-0640 https://source.android.com/security/bulletin/2017-06-01  View

Related JVN