Vulnerabilities (CVE)

Filtered by vendor Pandora Subscribe
Filtered by product Kmplayer
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-1745 1 Pandora 1 Kmplayer 2024-04-11 4.3 MEDIUM 7.8 HIGH
A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unknown processing in the library SHFOLDER.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224633 was assigned to this vulnerability.
CVE-2018-5200 1 Pandora 1 Kmplayer 2023-12-10 6.8 MEDIUM 7.8 HIGH
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code execution.