Allplayer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-25735 HIGH POC This Week

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Allplayer

NVD Exploit-DB

CVSS 4.0

8.6

EPSS

0.0%

CVE-2013-7409 HIGH POC THREAT Act Now

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.1%.

Denial Of Service RCE Buffer Overflow Allplayer

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

82.1%

Threat

5.5

CVE-2019-25735

EPSS 0% CVSS 8.6

HIGH POC This Week

RCE Buffer Overflow Allplayer

NVD Exploit-DB

CVE-2013-7409

EPSS 82% 5.5 CVSS 7.5

HIGH POC THREAT Act Now

Denial Of Service RCE Buffer Overflow +1

NVD Exploit-DB