CVE-2023-1745

CVE-2023-1745 (KMPlayer 4.2.2.73) involves an issue in the SHFOLDER.dll component that enables an uncontrolled search path due to a manipulation in processing. This vulnerability requires local access to exploit and has been publicly disclosed. Affected software is KMPlayer, with the root cause d...

CVE-2018-5200

CVE-2018-5200 relates to KMPlayer 4.2.2.15 and earlier, where a Heap Based Buffer Overflow occurs when processing crafted FLV data. The issue arises because more frame data is copied to heap memory than the size specified in the frame header, causing memory corruption and potential remote code ex...

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows an attacker to trigger a Denial of Service (DoS) by providing a crafted AVI file . While the vulnerability may lead to system compromise, the primary impact is the disruption of service. Remediation involves updating KMPlayer to the latest version...