CVE:CVE-2018-20760
CNNVD:CNNVD-201902-139
GPAC是一款开源的多媒体框架。
GPAC 0.7.2版本中的libgpac_static.a静态链接库的media_tools/text_import.c文件的‘gf_text_get_utf8_line’函数存在越界写入漏洞，该漏洞源于程序错误地处理了返回的-1值。远程攻击者可诱使用户打开特制文件利用该漏洞造成拒绝服务。
solution:Upgrade gpac gpac to a higher version than 0.7.1,and avoid the version (,0.7.1]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10