Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

kmplayer / kmplayer CVEs

Beta · best-effort

5 CVEs tagged to kmplayer / kmplayer — 2 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to kmplayer vendor archive

CVE-2019-17259

Published Oct 8, 2019

KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!src_new+0x000000000014d6ee.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-9133

Published Apr 9, 2019

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bo…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-16952

Published Nov 28, 2017

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-3841

Published Jul 3, 2012

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is loca…

CVSS 9.3 · Critical

Vendor/product tagsBeta · best-effort

CVE-2011-2594

Published Sep 2, 2011

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title fiel…

CVSS 9.3 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1