CVE-2011-2594

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title field.

Score

CVSS 2.0 9.3 Critical

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2011-09-02

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Kmplayer (Kmplayer)

References

• http://secunia.com/advisories/45264
• http://www.securityfocus.com/bid/49342
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69451