CVE:CVE-2018-6360
CNNVD:CNNVD-201801-1004
mpv是一款免费的、跨平台的开源媒体播放器。
mpv 0.28.0及之前版本中存在安全漏洞。远程攻击者可借助特制的网站利用该漏洞执行任意代码。
solution:Upgrade mpv mpv to a higher version than 0.28.0,and avoid the version (,0.28.0]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0