Approved changes feed: RSS · Atom

cpe:2.3:a:pandora.tv:kmplayer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPandora.Tv (689c5163-dccf-5b3f-b0ef-68beef9b3de4)
ProductKmplayer (8e962b50-e314-5e35-a8be-622fee71eec1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9133 vulnerable 2026-06-08 05:14:25.030913 KMPlayer Subtitles parser Heap Overflow Vulnerability
HIGH (7.8)
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file.
Published: 2019-04-09T17:33:27.000Z
Updated: 2024-08-04T21:38:46.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5200 vulnerable 2026-06-08 05:11:50.414554 KMPlayer Heap Overflow Vulnerability
HIGH (8)
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code execution.
Published: 2018-12-20T14:00:00.000Z
Updated: 2024-09-16T23:25:26.922Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.