Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-f8nh-xrnd-ykg9 |
| Summary | |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://www.splayer.org/ |
| reference_id |
www.splayer.org |
| reference_type |
|
| scores |
| 0 |
| value |
8.6 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 1 |
| value |
Track* |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-08-20T18:47:45Z/ |
|
|
| url |
https://www.splayer.org/ |
|
|
| Weaknesses |
| 0 |
| cwe_id |
120 |
| name |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') |
| description |
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. |
|
|
| Exploits |
| 0 |
| date_added |
null |
| description |
This module exploits a vulnerability in SPlayer v3.7 or prior. When SPlayer
requests the URL of a media file (video or audio), it is possible to gain arbitrary
remote code execution due to a buffer overflow caused by an exceeding length of data
as the 'Content-Type' parameter. |
| required_action |
null |
| due_date |
null |
| notes |
Reliability:
- unknown-reliability
Stability:
- unknown-stability
SideEffects:
- unknown-side-effects
|
| known_ransomware_campaign_use |
false |
| source_date_published |
2011-05-04 |
| exploit_type |
null |
| platform |
Windows |
| source_date_updated |
null |
| data_source |
Metasploit |
| source_url |
https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/misc/splayer_content_type.rb |
|
|
| Severity_range_score | 8.6 - 8.6 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-f8nh-xrnd-ykg9 |