Lucene search

K
cve[email protected]CVE-2011-2594
HistorySep 02, 2011 - 4:55 p.m.

CVE-2011-2594

2011-09-0216:55:04
CWE-119
web.nvd.nist.gov
23
kmplayer
buffer overflow
cve-2011-2594
remote code execution
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title field.

Affected configurations

NVD
Node
kmplayerkmplayerMatch3.0.0.1441
CPENameOperatorVersion
kmplayer:kmplayerkmplayereq3.0.0.1441

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

Related for CVE-2011-2594