Описание
GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server interaction.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- Product
- Third Party Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:gomlab:gom_player:2.3.90.5360:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00216
Низкий
8.8 High
CVSS3
Дефекты
CWE-319
Связанные уязвимости
CVSS3: 8.8
github
около 2 месяцев назад
GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server interaction.
EPSS
Процентиль: 44%
0.00216
Низкий
8.8 High
CVSS3
Дефекты
CWE-319