漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5521.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Amazon Music Player 安全漏洞
Vulnerability Description
Amazon Music Player是美国亚马逊(Amazon)公司的一款音乐播放器。 Amazon Music Player 6.1.5.1213版本中的URI handlers的处理存在安全漏洞,该漏洞源于程序没有验证用户提交的字符串。攻击者可通过诱使用户访问恶意的页面或打开恶意的文件利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A