Is the K-lite codec pack affected to this attack?
2 posters
Page 1 of 1
Is the K-lite codec pack affected to this attack?
Hello! I have installed K-lite 'mega' codec 10.7.5 and some days ago I read the post about ffmpeg vulnerability.
http://habrahabr.ru/company/mailru/blog/274855/ [on russian]
http://news.softpedia.com/news/zero-day-ffmpeg-vulnerability-lets-anyone-steal-files-from-remote-machines-498880.shtml [some info on english]
I want to know - my version of this pack have this FFmpeg and this bug? All settings in 'mega' codec pack I leave by default. If yes - where can I type this command manually on windows 7 "--disable-network configure flag" to fix this?
Sorry for my bad english.
http://habrahabr.ru/company/mailru/blog/274855/ [on russian]
http://news.softpedia.com/news/zero-day-ffmpeg-vulnerability-lets-anyone-steal-files-from-remote-machines-498880.shtml [some info on english]
I want to know - my version of this pack have this FFmpeg and this bug? All settings in 'mega' codec pack I leave by default. If yes - where can I type this command manually on windows 7 "--disable-network configure flag" to fix this?
Sorry for my bad english.
Rul3z- Posts : 2
Join date : 2016-01-18
Re: Is the K-lite codec pack affected to this attack?
The codec pack only uses a subset of the functionality from FFmpeg. Exploiting that vulnerability requires multiple pieces of functionality from FFmpeg, some of which (like the 'pipe' protocol) are not included in the compiled FFmpeg libraries that used by the codec pack. So current (and old) versions of the K-Lite codec pack are not vulnerable.
But if it makes you feel better, the patch that fixes that vulnerability in FFmpeg is already included in version 11.8.6 of the codec pack.
But if it makes you feel better, the patch that fixes that vulnerability in FFmpeg is already included in version 11.8.6 of the codec pack.
Re: Is the K-lite codec pack affected to this attack?
Ok, thanks you for answer!
Rul3z- Posts : 2
Join date : 2016-01-18
Page 1 of 1
Permissions in this forum:
You cannot reply to topics in this forum