PT-2023-17210 · Mplayer+1 · Mplayer+1

10Cksyiqiyinhangzhoutechnology · Published 2023-03-30 · Updated 2024-05-17 · CVE-2023-1745

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions KMPlayer version 4.2.2.73

Description A problematic issue has been found in the library SHFOLDER.dll, affecting some unknown processing. The manipulation leads to an uncontrolled search path. This issue requires local attacking to be exploited.

Recommendations For KMPlayer version 4.2.2.73, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-1745

Affected Products

Mplayer

Shfolder.Dll

References · 8

• 🔥 https://github.com/10cksYiqiyinHangzhouTechnology/KMPlayer_Poc · Exploit
• 🔥 https://youtu.be/7bh2BQOqxFo · Exploit
• 🔥 https://drive.google.com/file/d/1bdYaDmtWhnjaHkzv3bZ4PUSMzDJ8JjSV/view · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1745 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1745 · Vendor Advisory
• https://vuldb.com/?ctiid.224633 · Note
• https://vuldb.com/?id.224633 · Note
• https://t.me/cibsecurity/61224 · Telegram Post