CVE:CVE-2014-8547
CNNVD:CNNVD-201411-086
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。
FFmpeg 2.4.1及之前版本的libavcodec/gifdec.c文件中存在安全漏洞，该漏洞源于程序没有正确计算图像高度。远程攻击者可借助特制的GIF数据利用该漏洞造成拒绝服务（越边界访问）。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade ffmpeg ffmpeg to a higher version than 2.4.1,0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9:pre1,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.4.5,0.5.4.6,0.5.5,0.6,0.6.1,0.6.2,0.6.3,0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.11,0.7.12,0.8.0,0.8.1,0.8.2,0.8.5,0.8.5.3,0.8.5.4,0.8.6,0.8.7,0.8.8,0.8.10,0.8.11,0.9,0.9.1,0.10,0.10.3,0.10.4,0.11,0.11.1,0.11.2,0.11.3,0.11.4,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.2,1.2.1,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.2,2.2.4,2.3,2.3.2,2.3.3,2.3.4,2.4,and avoid the version (,2.4.1],0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9:pre1,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.4.5,0.5.4.6,0.5.5,0.6,0.6.1,0.6.2,0.6.3,0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.11,0.7.12,0.8.0,0.8.1,0.8.2,0.8.5,0.8.5.3,0.8.5.4,0.8.6,0.8.7,0.8.8,0.8.10,0.8.11,0.9,0.9.1,0.10,0.10.3,0.10.4,0.11,0.11.1,0.11.2,0.11.3,0.11.4,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.2,1.2.1,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,2.0,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,2.2,2.2.4,2.3,2.3.2,2.3.3,2.3.4,2.4