NetSight
IP …
medium5.5

CVE-2019-9133

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then…

Impact

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file.

Affected products

VendorProductAffected versions
KmplayerKmplayer
through 2018.12.24.14
FedoraprojectFedora
Versions 29, 30

Weakness classification

CWE-190CWE-191

References