Zero-Day FFmpeg Vulnerability

[drjtech]

Zero-Day FFmpeg Vulnerability Lets Anyone Steal Files from Remote Machines

A zero-day vulnerability in the FFmpeg open-source multimedia framework, which is currently used in numerous Linux kernel-based operating systems and software applications, also for the Mac OS X and Windows platforms, was unveiled recently.

The vulnerability was discovered on January 12, 2016, by Russian programmer Maxim Andreev in the current stable builds of the FFmpeg software, and it would appear that it allows anyone who has the necessary skills to hack a computer to read local files on a remote machine and send them over the network using a specially crafted video file.

Another reminder to keep all the bits and pieces of your system up-to-date. Watch for the new builds of FFmpeg for your OS; it looks like Linus builds are already being updated.

[lordsmurf]

I've guessing this only applies to servers, not workstations/desktops.