CVE-2014-3899

GOM Media Player (Gretech) is affected by CVE-2014-3899. A DoS can be triggered by processing a specially crafted image file, affecting versions up to 2.2.51.5149 and earlier. The root cause is related to image file handling within the player, enabling remote-induced service disruption without ve...

CVE-2017-5881

CVE-2017-5881 affects GOM Player 2.3.10.5266. Multiple sources describe a vulnerability where a crafted ".fpx" file can cause memory corruption leading to a denial of service (and potentially other impacts). Public entries consistently cite memory corruption as the underlying issue and mention a ...

CVE-2013-5715

CVE-2013-5715 affects Gretech GOM Media Player prior to 2.2.53.5169. The vulnerability is a buffer overflow in the application, with the root cause described as unspecified in the provided documents. The impact, attack vector, and exploitation details are not specified beyond the general buffer o...

CVE-2013-5716

CVE-2013-5716 affects Gretech GOM Media Player 2.2.53.5169 and earlier. A crafted WAV file can cause a remote DoS (application crash). Public exploits exist; exploitation is remote over the network. Affected vectors are via a WAV payload. Remediation: update to the latest version. If not yet upda...

CVE-2011-5162

GOM Player 2.1.33.5071 is affected by a stack-based buffer overflow in the ASX ref href handling, allowing user‑assisted remote code execution via a crafted ASX file with a long URI. The issue is described as a regression from CVE-2007-0707. Affected component: parsing of the ASX file’s ref href ...

CVE-2013-7184

GOM Media Player (Windows) versions 2.2.56.5158 and earlier are affected by CVE-2013-7184, a memory corruption vulnerability in AVI file handling that can trigger a remote denial of service. The incident is triggered by a crafted AVI file and affects the GOM Player’s ability to process such files...

CVE-2009-1497

CVE-2009-1497 describes a stack-based buffer overflow in srt2smi.exe of Gretech Online Movie Player (GOM Player) 2.1.16.4635. The vulnerability allows remote attackers to crash the application or execute arbitrary code via a long string contained in an SRT subtitle file. The available documents d...

CVE-2023-53875

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in the Internet Explorer component. The issue can be triggered via DNS spoofing with a malicious URL shortcut and WebDAV, enabling an attacker to execute arbitrary code and potentially run a reverse shell with SMB server intera...

CVE-2023-53874

Summary: CVE-2023-53874 affects GOM Player 2.3.90.5360. The issue is a buffer overflow in the equalizer preset name input field, with exploitation described as overwriting the preset name by 260 'A' characters, leading to application instability or a crash. What’s affected: GOM Player version 2.3...