An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and denial of service.
Vendor
daum vulnerabilities
4 published CVES affecting daum, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 1
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest daum CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 2.2%
-
CVE-2013-3942 Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability
PublishedHighCVSS 7.8 EPSS 1.4%Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability
-
HighCVSS 7.8 EPSS 2.8% PoC
PotPlayer 1.5.40688: .avi File Memory Corruption
-
MediumCVSS 5.4 EPSS 0.29%
The Daum Maps - Subway (aka net.daum.android.map) application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.