Description
GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability.
Problem types
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Product status
Credits
Ahmet Ümit BAYRAM
References
www.exploit-db.com/exploits/51724
www.exploit-db.com/exploits/51724 (ExploitDB-51724)
www.gomlab.com (GOM Lab Vendor Webpage)
www.vulncheck.com/...ffer-overflow-via-equalizer-preset-name (VulnCheck Advisory: GOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset Name)
Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.