KMPlayer 3.3.0.33 - Multiple Vulnerabilities

Exploit Title: The KMPlayer v3.3.0.33 Multiple Vulnerabilities Date: October, 26, 2012 Discovered By: Mr.XHat Exploit Author: Mr.XHat E-Mail: Mr.XHat AT Gmail.com Vendor: http://www.kmplayer.com/ Version: 3.3.0.33 Tested On: WinXP SP3 EN Buffer Overflow Vulnerability: junk = "\x41" 250 eip =...

KMPlayer '.avi'文件本地拒绝服务漏洞

BUGTRAQ ID: 56322 KMPlayer是来自韩国的影音全能播放器，是从linux平台移植而来的，几乎可以播放您系统上所有的影音文件。 KMPlayer 3.0.0.1440及其他版本存在安全漏洞，本地攻击者可利用此漏洞使受影响应用崩溃。 0 KMPlayer 3.0.0.1440 厂商补丁： KMPlayer -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://kmplayer.kde.org/ !/usr/bin/perl Title : KmPlayer v3.0.0.1440 Local...

KMPlayer 3.0.0.1440 - .avi File Local Denial of Service

KMPlayer 3.0.0.1440 - .avi File Local Denial of Service source: https://www.securityfocus.com/bid/56322/info KMPlayer is prone to a local denial-of-service vulnerability. An local attacker can exploit this issue to crash the affected application, denying service to legitimate users. KMPlayer...

KMPlayer 3.0.0.1440 - '.avi' File Local Denial of Service

source: https://www.securityfocus.com/bid/56322/info KMPlayer is prone to a local denial-of-service vulnerability. An local attacker can exploit this issue to crash the affected application, denying service to legitimate users. KMPlayer 3.0.0.1440 is vulnerable; other versions may also be affecte...

CVE-2012-3841

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory...

CVE-2012-3841

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory...

CVE-2012-3841

KMPlayer 3.2.0.19 is affected by an untrusted search path vulnerability that allows local users to execute arbitrary code via a Trojan ehtrace.dll placed in the current working directory, enabling DLL hijacking. The root cause is loading a user-writable DLL from the CWD, which can be exploited lo...

CVE-2012-3841: Undefined Security Weakness

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory...

KLA10232 ACE vulnerability in KMPlayer

An untrusted path vulnerability was found in KMPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via dll hijacking. Original advisories - Related products KMPlayer CVE list CVE-2012-3841 critical Solution Update to...

KMPlayer 3.2.0.19 DLL Hijack

Exploit Title: KMPlayer 3.2.0.19 hijacking vulnerability ehtrace.dll Author: nimaarek Software Link: http://kmplayer.en.softonic.com Version: 3.2.0.19 Tested on: Windows 7 . || | | / | |/ \ \ \ \ / | |/ / | | \ | Y Y / / | | /\ /| | \ / / / / / / /...

KMPlayer '.kpl' File 'Title' Field Remote Buffer Overflow Vulnerability

KMPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KMPlayer '.kpl' File 'Title' Field Remote Buffer Overflow Vulnerability

This host is installed with KMPlayer and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbkmplayerkplfilebofvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ KMPlayer '.kpl' File 'Title' Field Remote Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

CVE-2011-2594

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

Heap overflow

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

CVE-2011-2594

KMPlayer is reported vulnerable to a heap-based buffer overflow in KMPlayer 3.0.0.1441 (and possibly other versions) that allows remote code execution via a playlist .KPL file with an excessively long Title field. Documents consistently describe this as a buffer overflow in the .kpl playlist hand...

CVE-2011-2594

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

CVE-2011-2594: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

KMPlayer播放列表处理缓冲区溢出漏洞

No description provided by source...

KMPlayer '.mp3' File Remote Buffer Overflow Vulnerability

KMPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...