#VU5835 Heap-based buffer overflow in GOM Player - CVE-2017-5881

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU5835

#VU5835 Heap-based buffer overflow in GOM Player - CVE-2017-5881

Published: February 16, 2017 / Updated: February 16, 2017


Vulnerability identifier: #VU5835
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: CVE-2017-5881
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vulnerable software:
GOM Player
Software vendor:
Gretech Corp.

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exist due to boundary error when processing .pfx files. A remote attacker can trick the victim into opening a specially crafted .pfx file, cause heap-based buffer overflow and execute arbitrary code on the target system with privileges of the current user.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links