Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-1897 PoC — FFmpeg 信息泄露漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/FFmpeg%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9ESSRF%E6%BC%8F%E6%B4%9E%20CVE-2016-1897%2BCVE-2016-1898.md
Associated Vulnerability
Title:FFmpeg 信息泄露漏洞 (CVE-2016-1897)
Description:FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。 FFmpeg 2.x版本中存在安全漏洞。远程攻击者可通过使用HTTP Live Streaming(HLS)M3U8文件中的concat协议，导致外部HTTP请求的URL字符串中包含本地文件的第一行利用该漏洞实施跨源攻击，读取任意文件。
File Snapshot

 # FFmpeg 任意文件读取漏洞/SSRF漏洞 CVE-2016-1897/CVE-2016-1898

## 漏洞描述

FFmpeg 是一套可以用来记录、转换数字音频、视频，并能将其转化为流的开

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.