Wednesday, January 28, 2009
The vulnerability was fixed (Figure 4-9 shows the timeline) and a new version of FFmpeg is available, so I released a detailed security advisory on my website. The bug was assigned CVE-2009-0385.
Figure 4-9. Timeline of the FFmpeg bug from notification to the release of a fixed version of FFmpeg