PT-2015-3340

CVE-2015-0855

·

تاريخ النشر

2015-09-13

·

تاريخ التحديث

2017-04-04

الوصف من

CVSS 3.1
10
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Pitivi versions prior to 0.95
Description The issue is related to the incorrect handling of code generation in the mediaLibraryPlayCb function in mainwindow.py of the Pitivi video editor. This can be exploited by a remote attacker to execute arbitrary code using shell metacharacters in a file path.
Recommendations For versions prior to 0.95, update to version 0.95 or later to resolve the issue. As a temporary workaround, consider restricting access to the mediaLibraryPlayCb function in mainwindow.py to minimize the risk of exploitation. Avoid using shell metacharacters in file paths until the issue is resolved.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾