CVE Catalog

CVE-2015-0855

Critical
Published: Translated: NVD NIST

Summary

The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.

Risk Assessment

Exploitation of this vulnerability could lead to remote code execution, posing a significant threat to the security of the system and the organization's data.

Recommendation

It is recommended to update pitivi to version 0.95 or later to mitigate this vulnerability.

Original NVD description (English source)

The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS