CVEvulnerability
CVE-2013-0224
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-16
Description
The Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows local users to execute arbitrary PHP code by modifying a temporary PHP file.
Affected configurations
• video project video 7.x-2.0
• video project video 7.x-2.1
• video project video 7.x-2.2
• video project video 7.x-2.3
• video project video 7.x-2.4
• video project video 7.x-2.5
• video project video 7.x-2.6
• video project video 7.x-2.7
• video project video 7.x-2.8
• video project video 7.x-2.x
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2013/01/25/4 www.openwall.com
- https://drupal.org/node/1895234 Patch
- https://drupal.org/node/1896714 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/01/25/4 www.openwall.com
- https://drupal.org/node/1895234 Patch
- https://drupal.org/node/1896714 Patch, Vendor Advisory