oss-sec mailing list archives
Re: Fwd: FFmpeg: stealing local files with HLS+concat
From: Alexander Cherepanov <ch3root () openwall com>
Date: Wed, 13 Jan 2016 15:19:47 +0300
On 2016-01-13 14:01, Vladimir Dubrovin wrote:
I've underestimated the impact of this bug, so it was full disclosured in this article (Russian language, but google translate works fine with it) - http://habrahabr.ru/company/mailru/blog/274855
By following links from there: slides: http://www.slideshare.net/MailRuGroup/security-meetup-22-mailru video: https://www.youtube.com/watch?v=HRNPnbxrSCo (still both in Russian) Somewhat related: https://github.com/ctfs/write-ups-2015/tree/master/9447-ctf-2015/web/super-turbo-atomic-gif-converter -- Alexander Cherepanov
Current thread:
- Fwd: FFmpeg: stealing local files with HLS+concat Vladimir Dubrovin (Jan 13)
- Re: Fwd: FFmpeg: stealing local files with HLS+concat Alexander Cherepanov (Jan 13)
- Re: Fwd: FFmpeg: stealing local files with HLS+concat cve-assign (Jan 14)
- Re: Fwd: FFmpeg: stealing local files with HLS+concat Alexander Cherepanov (Jan 13)