Gomlab

Gom Player

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-53874

Exploit
  • EPSS 0.06%
  • Veröffentlicht 15.12.2025 20:28:16
  • Zuletzt bearbeitet 18.12.2025 22:35:17

GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and ...

8.8

CVE-2023-53875

Exploit
  • EPSS 0.25%
  • Veröffentlicht 15.12.2025 20:28:16
  • Zuletzt bearbeitet 18.12.2025 22:35:31

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV te...

7.8

CVE-2017-5881

Exploit
  • EPSS 1.28%
  • Veröffentlicht 21.02.2017 07:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file.

4.3

CVE-2014-3899

  • EPSS 0.68%
  • Veröffentlicht 12.08.2014 05:01:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service (launch outage) via a crafted image file.

4.3

CVE-2013-7184

  • EPSS 12.25%
  • Veröffentlicht 24.01.2014 15:08:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted AVI file.

10

CVE-2013-5715

  • EPSS 0.34%
  • Veröffentlicht 09.09.2013 17:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors.

4.3

CVE-2013-5716

Exploit
  • EPSS 9.27%
  • Veröffentlicht 09.09.2013 17:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (application crash) via a crafted WAV file.

9.3

CVE-2011-5162

  • EPSS 36%
  • Veröffentlicht 15.09.2012 17:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists because of a CVE-2007-0707 regression.

9.3

CVE-2009-1497

Exploit
  • EPSS 25.91%
  • Veröffentlicht 01.05.2009 16:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in an SRT file.