CVE:CVE-2011-2162
CNNVD:CNNVD-201105-234
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。
在MPlayer 1.0版本以及其他产品，Mandriva Linux 2009.0，2010.0以及2010.1版本；Corporate Server 4.0版本(也称为CS4.0)；以及Mandriva Enterprise Server 5版本(也称为MES5)中使用的FFmpeg 0.4.x到0.6.x版本中存在多个未明漏洞。这些漏洞会引起未知影响和攻击向量。
solution:Upgrade ffmpeg ffmpeg to a higher version than 0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9:pre1,0.5.1,0.5.2,0.5.3,0.5.4,0.6.1,and avoid the version 0.4.0,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9:pre1,0.5.1,0.5.2,0.5.3,0.5.4,0.6.1; Upgrade mplayerhq mplayer to a higher version than 1.0,and avoid the version 1.0; Upgrade mandriva corporate_server to a higher version than 4.0,and avoid the version 4.0; Upgrade mandriva enterprise_server to a higher version than 5,and avoid the version 5; Upgrade mandriva linux to a higher version than 2009.0,2010.0,2010.1,and avoid the version 2009.0,2010.0,2010.1