158 matches found
Fedora 30 : kmplayer (2019-9b1da08d62)
Update to 0.12.0b - Clean up SPEC - Remove patches - Use sed for make Phonon default - Use KF5 instead of KDE4 - Renew URLs - CVE-2019-9133 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
CVE-2019-9133
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...
CVE-2019-9133
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...
Integer overflow
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...
CVE-2019-9133
KMPlayer
CVE-2019-9133 KMPlayer Subtitles parser Heap Overflow Vulnerability
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...
CVE-2019-9133: Integer Overflow or Wraparound
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...
Heap overflow
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code...
CVE-2018-5200
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code...
CVE-2018-5200
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code...
CVE-2018-5200
CVE-2018-5200 relates to KMPlayer 4.2.2.15 and earlier, where a Heap Based Buffer Overflow occurs when processing crafted FLV data. The issue arises because more frame data is copied to heap memory than the size specified in the frame header, causing memory corruption and potential remote code ex...
CVE-2018-5200 KMPlayer Heap Overflow Vulnerability
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code...
PT-2018-16794 · Pandoratv · Mplayer
Name of the Vulnerable Software and Affected Versions: KMPlayer versions 4.2.2.15 and earlier Description: The issue is a Heap Based Buffer Overflow that can be exploited using a crafted FLV format file. The problem arises when more frame data is copied to heap memory than the size specified in t...
CVE-2018-5200: Improper Restriction of Operations within the Bounds of a Memory Buffer
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code...
KMPlayer .nsv Denial of Service Vulnerability
KMPlayer is a video player developed by the KMPlayer team for the Linux and UNIX operating systems. The player uses Mplayer, Xine and GStreamer as decoding backends, and is one of the components of KDE. A denial of service vulnerability exists in KMPlayer .nsv version 4.2.2.4. A remote attacker c...
CVE-2017-16952
KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...
CVE-2017-16952
KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...
Code injection
KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file...
CVE-2017-16952
KMPlayer 4.2.2.4 is affected by a denial-of-service vulnerability triggered by a crafted NSV file. Publicly available references (NVD, CNVD, CVE list) describe remote DoS via NSV payload; exploitation examples exist (Exploit-DB, Exploit-Pack). No remediation or fixed version is provided in the su...