Read the docs

Coolplayer

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Coolplayer records in CISA KEV

No Coolplayer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coolplayer 5 records MEDIUM

Records

5 records in Coolplayer · all components

TI-2009-01361 CVE-2009-1437 · GHSA-ww8m-pmxw-w5x5

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+…

Priority MEDIUM 55

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.13992 Published 2009-04-27 No fix listed CWE-119
TI-2009-01373 CVE-2009-1449 · GHSA-mxhx-hq56-f376

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+…

Priority MEDIUM 49

Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code via a skin file (skin.ini) with a large PlaylistSkin parameter.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05859 Published 2009-04-27 No fix listed CWE-119
TI-2007-06305 CVE-2007-6609 · GHSA-33v5-6gf6-m6w4

Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in…

Priority LOW 31

Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1) cTag or (2) cValue…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05224 Published 2007-12-31 No fix listed CWE-119
Open these records in search →