Buffer Overflow in KMPlayer Versions Allowing Remote Code Execution
CVE-2009-2896
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 20%
What is CVE-2009-2896?
A buffer overflow vulnerability exists in KMPlayer versions 2.9.4.1433 and earlier. This flaw permits remote attackers to execute arbitrary code or trigger a denial of service by sending a specially crafted long string within a subtitle (.srt) playlist file. As a result, careful management of subtitle files is crucial to mitigate potential exploits, as unauthorized access can lead to serious repercussions.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.