allmediaserver vulnerabilities

Products

• allmediaserver 3

Latest allmediaserver CVEs

Newest publication first

1. CVE-2022-28480 ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe.

   Published 2022-04-29

   Critical·CVSS 9.8 EPSS 1.8%

   ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe.

2. CVE-2022-28381 Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932.

   Published 2022-04-03

   Critical·CVSS 9.8 EPSS 70.4% Framework module

   Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932.

3. CVE-2017-17932 A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the...

   Published 2017-12-28

   Critical·CVSS 9.8 EPSS 54.2% Framework module Public exploit PoC

   A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.