Описание
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mpv | fixed | 0.30.0-1 | package |
Примечания
https://github.com/mpv-player/mpv/issues/6808
https://github.com/mpv-player/mpv/commit/5858e3cdbd6fbae3ed80366912dd5df0af4fa126 (v0.30.0)
EPSS
Процентиль: 15%
0.00242
Низкий
Связанные уязвимости
CVSS3: 7
ubuntu
больше 3 лет назад
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
CVSS3: 7
nvd
больше 3 лет назад
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
CVSS3: 7
github
больше 3 лет назад
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
EPSS
Процентиль: 15%
0.00242
Низкий