CVE:CVE-2018-13006
CNNVD:CNNVD-201807-029
GPAC是一套开源的多媒体框架。MP4Box是其中的一个多媒体包装器。
GPAC 0.7.1版本中的MP4Box的isomedia/box_dump.c文件的‘hdlr_dump’函数存在堆缓冲区溢出漏洞。攻击者可利用该漏洞造成基于堆的缓冲区越界读取。
solution:Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade gpac gpac to a higher version than 0.7.1,and avoid the version 0.7.1; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10