critical9.8
CVE-2021-24030
The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable.
Impact
The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gameroom | before 1.26.0 |