Kmplayer

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kmplayer records in CISA KEV

No Kmplayer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kmplayer 5 records MEDIUM

Records

5 records in Kmplayer · all components

TI-2011-02257 CVE-2011-2594 · GHSA-9mmp-5j7c-w2r4

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows…

MEDIUM 47

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title field.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04003 Published 2011-09-02 No fix listed CWE-119

TI-2012-03323 CVE-2012-3841 · GHSA-p99j-3cmf-8pxc

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute…

MEDIUM 46

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03285 Published 2012-07-03 No fix listed

TI-2019-12875 CVE-2019-17259 · GHSA-78j6-v8x2-4hh6

KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!src_new+0x000000000014d6ee.

LOW 34

KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!src_new+0x000000000014d6ee.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00453 Published 2019-10-08 No fix listed CWE-787

TI-2017-12485 CVE-2017-16952 · GHSA-rjjc-gp3m-4qr9

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.

LOW 31

KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.03357 Published 2017-11-28 No fix listed CWE-20

TI-2019-06597 CVE-2019-9133 · GHSA-jfcr-39q8-hmpx

KMPlayer Subtitles parser Heap Overflow Vulnerability

LOW 29

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01875 Published 2019-04-09 Fixed in 2018.12.24.14 CWE-190

Open these records in search →

Critical	2
High	1
Medium	2
Low	0
No CVSS	0