Описание
GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- Product
- Third Party Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:gomlab:gom_player:2.3.90.5360:*:*:*:*:*:*:*
EPSS
Процентиль: 11%
0.00038
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-120
Связанные уязвимости
CVSS3: 9.8
github
около 2 месяцев назад
GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability.
EPSS
Процентиль: 11%
0.00038
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-120