Denial Of Service (DoS)

2022-05-0416:25:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

39.3%

JSON

tkvideoplayer is vulnerable to denial of service. The vulnerability exists due to the large memory allocation for small files in the __init__ function of tkvideoplayer.py, allowing an attacker to cause an application crash.

CPENameOperatorVersion
tkvideoplayerle1.3.0
tkvideoplayerle1.3.0

CPE	Name	Operator	Version
	tkvideoplayer	le	1.3.0
	tkvideoplayer	le	1.3.0

References

github.com/advisories/GHSA-jmhj-vh4q-hhmq

github.com/PaulleDemon/tkVideoPlayer/commit/c9d63990e12975477e5d94b8ed70f62c74252cbe

github.com/PaulleDemon/tkVideoPlayer/issues/3

github.com/PaulleDemon/tkVideoPlayer/pull/4

github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-hhmq

0.001 Low

EPSS

Percentile

39.3%

JSON

Related for VERACODE:35371