Yazhi Wang

The issue is related to errors in handling input data in the implementation of the Pragmatic General Multicast (PGM) protocol in Windows. This can allow a remote attacker to execute arbitrary code by sending a specially crafted file. The vulnerability enables remote attackers to execute arbitrary code and affect the system.

The issue allows directory traversal validation to be bypassed when the `cachestart` parameter is used. This can lead to information disclosure.