PT-2020-7440
CVE-2013-3488
·
Published
2020-01-31
·
Updated
2020-02-01
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Media Player Classic - Home Cinema (MPC-HC) versions prior to 1.7.0.7858
Description:
The issue allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream (M2TS) file. This is due to a stack-based buffer overflow.
Recommendations:
For versions prior to 1.7.0.7858, update to version 1.7.0.7858 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted MPEG-2 Transport Stream (M2TS) files until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾