CVE Catalog

CVE-2023-53874

Critical
Published: Translated: NVD NIST

Summary

GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability.

Risk Assessment

The risk involves the possibility of crashing the application, potentially leading to data loss or disruption of user work.

Recommendation

Upgrade GOM Player to the latest version that includes security fixes.

Original NVD description (English source)

GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS