CVE:CVE-2003-0075
CNNVD:CNNVD-200302-047
Blade encoder (BladeEnc) 0.94.2及其之前版本中samplein.c的myFseek函数存在整数符号错误。远程攻击者可以借助一个带有“fmt”波块的负数偏移值执行任意代码。
solution:Upgrade bladeenc bladeenc to a higher version than 0.92.7,0.93.10,0.94.0,0.94.1,0.94.2,and avoid the version 0.92.7,0.93.10,0.94.0,0.94.1,0.94.2