Описание
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mpv | fixed | 0.30.0-1 | package |
Примечания
https://github.com/mpv-player/mpv/issues/6808
https://github.com/mpv-player/mpv/commit/5858e3cdbd6fbae3ed80366912dd5df0af4fa126 (v0.30.0)
Связанные уязвимости
CVSS3: 7
ubuntu
больше 3 лет назад
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
CVSS3: 7
nvd
больше 3 лет назад
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
CVSS3: 7
github
больше 3 лет назад
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
CVSS3: 7
altlinux
почти 6 лет назад
ALT-PU-2020-3404: package `mpv` update to version 0.33.0-alt1.1