PT-2023-17210 · Mplayer+1 · Mplayer+1

10Cksyiqiyinhangzhoutechnology · Publicado 2023-03-30 · Atualizado 2024-05-17 · CVE-2023-1745

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions KMPlayer version 4.2.2.73

Description A problematic issue has been found in the library SHFOLDER.dll, affecting some unknown processing. The manipulation leads to an uncontrolled search path. This issue requires local attacking to be exploited.

Recommendations For KMPlayer version 4.2.2.73, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2023-1745

Produtos afetados

Mplayer

Shfolder.Dll

Referências · 8

• 🔥 https://github.com/10cksYiqiyinHangzhouTechnology/KMPlayer_Poc · Exploit
• 🔥 https://youtu.be/7bh2BQOqxFo · Exploit
• 🔥 https://drive.google.com/file/d/1bdYaDmtWhnjaHkzv3bZ4PUSMzDJ8JjSV/view · Exploit
• https://vuldb.com/?ctiid.224633 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1745 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1745 · Aviso do Fabricante
• https://vuldb.com/?id.224633 · Nota
• https://t.me/cibsecurity/61224 · Publicação no Telegram