4 ms·
There have been multiple remote code execution vulnerabilities in the codec since that was last updated, and MS clearly does not plan to patch it. It’s a very b
by orev 4y ago
There have been multiple remote code execution vulnerabilities in the codec since that was last updated, and MS clearly does not plan to patch it. It’s a very bad idea to install this.
- DaiPlusPlus 4y agoCitation/link?
- deleted 4y ago[deleted]
- jsmith45 4y agoI'd certainly like more details. The latest CVE number that i can find for such flaws looks to be CVE-2022-30188, which Microsoft claims is patched: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30188 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20... But I will say that there is a disturbing number of such vulnerabilities listed for this codec.
- orev 4y agoThe last time I checked this, there were a few open CVEs that had been patched in the paid version, but the free one was not updated. It looks like the version numbers are similar now, so maybe my caveat no longer applies.