Allplayer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-7409 Oct 30, 15:55 HIGH POC THREAT Act Now

Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.1%.

RCE Buffer Overflow Denial Of Service Allplayer

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

82.1%

Threat

5.5

CVE-2019-25735 Jun 04, 13:22 HIGH POC This Week

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Allplayer

NVD Exploit-DB

CVSS 4.0

8.6

EPSS

0.0%

CVE-2013-7409

EPSS 82% 5.5 CVSS 7.5

HIGH POC THREAT Act Now

RCE Buffer Overflow Denial Of Service +1

NVD Exploit-DB

CVE-2019-25735

EPSS 0% CVSS 8.6

HIGH POC This Week

RCE Buffer Overflow Allplayer

NVD Exploit-DB