CVE-2019-9133: KMPlayer Subtitles parser Heap Overflow Vulnerability
When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9133?
CVE-2019-9133 is classified as a critical vulnerability due to its potential for memory out-of-bound read/write exploitation.
How do I fix CVE-2019-9133?
To fix CVE-2019-9133, users should update KMPlayer to the latest version beyond 2018.12.24.14.
Which versions of KMPlayer are affected by CVE-2019-9133?
KMPlayer versions 2018.12.24.14 and lower are affected by CVE-2019-9133.
What platforms are impacted by CVE-2019-9133?
CVE-2019-9133 affects the KMPlayer application on Windows and Fedora operating systems.
Can CVE-2019-9133 be exploited remotely?
Yes, CVE-2019-9133 can be exploited by enticing users to open a malicious subtitle file.