PT-2018-17503

Name of the Vulnerable Software and Affected Versions mpv versions prior to 0.28.0 Description The issue allows remote attackers to execute arbitrary code via a crafted web site. This is because mpv reads HTML documents containing VIDEO elements and accepts arbitrary URLs in a src attribute witho...