Attachment 190450 Details for Bug 225783 – Document CVE-2018-6360

[patch] Document CVE-2018-6360

vuxml.patch (text/plain), 1.74 KB, created by VK on 2018-02-09 00:54:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: VK

Created: 2018-02-09 00:54:28 UTC

Size: 1.74 KB

patch

obsolete

>Index: security/vuxml/vuln.xml
>===================================================================
>--- security/vuxml/vuln.xml	(revision 461282)
>+++ security/vuxml/vuln.xml	(working copy)
>@@ -58,6 +58,39 @@
>   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+  <vuln vid="3ee6e521-0d32-11e8-99b0-d017c2987f9a">
>+    <topic>mpv -- arbitrary code execution via crafted website</topic>
>+    <affects>
>+      <package>
>+	<name>mpv</name>
>+	<range><le>0.28.0</le></range>
>+      </package>
>+    </affects>
>+    <description>
>+      <body xmlns="http://www.w3.org/1999/xhtml">
>+	<p>mpv developers report:</p>
>+	<blockquote cite="https://nvd.nist.gov/vuln/detail/CVE-2018-6360">
>+	  <p>mpv through 0.28.0 allows remote attackers to execute arbitrary code
>+	     via a crafted web site, because it reads HTML documents containing
>+	     VIDEO elements, and accepts arbitrary URLs in a src attribute without
>+	     a protocol whitelist in player/lua/ytdl_hook.lua. For example, an
>+	     av://lavfi:ladspa=file= URL signifies that the product should call
>+	     dlopen on a shared object file located at an arbitrary local pathname.
>+	     The issue exists because the product does not consider that youtube-dl
>+	     can provide a potentially unsafe URL.</p>
>+	</blockquote>
>+      </body>
>+    </description>
>+    <references>
>+      <url>https://github.com/mpv-player/mpv/issues/5456</url>
>+      <cvename>CVE-2018-6360</cvename>
>+    </references>
>+    <dates>
>+      <discovery>2018-01-28</discovery>
>+      <entry>2018-02-09</entry>
>+    </dates>
>+  </vuln>
>+
>   <vuln vid="3d0eeef8-0cf9-11e8-99b0-d017c2987f9a">
>     <topic>Mailman -- Cross-site scripting (XSS) vulnerability in the web UI</topic>
>     <affects>

Actions: View | Diff

Attachments on bug 225783: 190450