Summary
It was discovered that the Mumble client supported websites for public servers
with arbitrary URL schemes. If a user were tricked into visiting a malicious
website from the public server list, a remote attacker could possibly execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | mumble | 1.2.12-1ubuntu1+esm1 |
Vulnerabilities 1
-
Unscored —
Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on …
References
-
report
https://ubuntu.com/security/CVE-2021-27229