CVE:CVE-2018-20761
CNNVD:CNNVD-201902-137
GPAC是一款开源的多媒体框架。
GPAC 0.7.2及之前版本中的libgpac_static.a静态链接库的scene_manager.c文件的‘gf_sm_load_init’函数存在缓冲区溢出漏洞。远程攻击者可诱使用户打开特制文件利用该漏洞在系统上执行任意代码。
solution:Upgrade gpac_project gpac to a higher version than 0.7.1,and avoid the version (,0.7.1]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10