Gomlab Gom Player — known CVE vulnerabilities

Every CVE whose affected-product data names Gomlab Gom Player, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2013-5715 — CVSS 10.0 (critical): Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors.
• CVE-2023-53874 — CVSS 9.8 (critical): GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the…
• CVE-2011-5162 — CVSS 9.3 (critical): Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with…
• CVE-2009-1497 — CVSS 9.3 (critical): Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attackers to cause a…
• CVE-2023-53875 — CVSS 8.8 (high): GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute…
• CVE-2017-5881 — CVSS 7.8 (high): GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact…
• CVE-2014-3899 — CVSS 4.3 (medium): Gretech GOM Player 2.2.51.5149 and earlier allows remote attackers to cause a denial of service (launch outage) via a crafted image file.
• CVE-2013-7184 — CVSS 4.3 (medium): Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted AVI…
• CVE-2013-5716 — CVSS 4.3 (medium): Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (application crash) via a…