>>1341062
Oh look, what is this OwO?
> One such exploit listed is an arbitrary code execution vulnerability in [...] libavcodec
Which means that such a video would pwn you *EVEN IF you feed it to ffmpeg to reencode it* - without ever opening it in a traditional "video player" software. Without even seeing a single frame of this video displayed on screen.
Just like I said.

The bigger picture, however, is as follows:
* vulnerabilities in underlying low-level libraries are big news and are being fixed
* a vulnerability in some highly specific video player software can fly under the radar for decently long, but only like 0.05% of users in the world would be using it
* if you embed an exploit that targets the first kind of vulnerability into a popular video (a fake/infected video of a latest blockbuster etc), it will be discovered by many people in an instant and you've burned it on such a trivial opportunity

These things make video file exploits extremely ill-suited for targeting random users indiscriminately, such as releasing an infected video via torrents. Instead, what actually happens in practice is that a little-known vulnerability in specific software - a specific video player etc - is used to target a specific victim who is known to use it.

Fearmongering about malware in video files - while it's fundamentally possible, no shit duh - is by and large spread by corporate owners of media IPs to dissuade clueless normies from pirating media, because unlike pirating software which is inherently risky virus-wise, pirating media is safe.

... and, again - I want to underscore this point one more time - a malware payload, IF it is present in a video file, can be targetting the x264 decoder itself instead of a highly specific video player, which means that NO method of handling the video file is safe, including feeding it directly to ffmpeg to reencode, like that other user is (erroneously) suggesting. You can NOT protect yourself with this method.

Back | Go to board

Board:

/t/

Thread:

It's October! Share your favorite lesser known terrifying films with your fellow anons