GCVE - cpe:2.3:a:gomlab:gom_player:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gomlab:gom_player:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gomlab (`deabc252-3dfa-576f-b643-c148deeab1b2`)
Product	Gom Player (`534875e9-130a-516a-9246-06150f82404b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-53875`	vulnerable	2026-06-08 06:19:39.886091	GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server interaction. Published: 2025-12-15T20:28:16.698Z Updated: 2026-04-07T14:07:01.891Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/51719 https://www.gomlab.com/ https://www.vulncheck.com/advisories/gom-player-remote-code-execution-via-insecure-ie-component	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-53874`	vulnerable	2026-06-08 06:19:39.884596	GOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset Name GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability. Published: 2025-12-15T20:28:16.180Z Updated: 2026-04-07T14:07:01.078Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/51724 https://www.gomlab.com https://www.vulncheck.com/advisories/gom-player-buffer-overflow-via-equalizer-preset-name	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3899`	vulnerable	2026-06-08 05:05:43.279482	Details available Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service (launch outage) via a crafted image file. Published: 2014-08-12T01:00:00.000Z Updated: 2024-08-06T10:57:17.920Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN32726697/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000085	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7184`	vulnerable	2026-06-08 05:05:08.587293	Details available Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted AVI file. Published: 2014-01-24T15:00:00.000Z Updated: 2024-08-06T18:01:19.425Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/89914 http://www.exploit-db.com/exploits/30414	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5716`	vulnerable	2026-06-08 05:04:53.299879	Details available Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (application crash) via a crafted WAV file. Published: 2013-09-09T17:00:00.000Z Updated: 2024-09-16T16:38:26.196Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/62173 http://www.exploit-db.com/exploits/28080	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5715`	vulnerable	2026-06-08 05:04:53.285810	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.