KMPlayer '. m3u' File Denial of Service Vulnerability

Release date:
Updated on: 2013-02-03

Affected Systems:
KMPlayer 3.5.0.77
Description:
--------------------------------------------------------------------------------
KMPlayer is an all-around audio and video player from South Korea. It is transplanted from the linux platform and can play almost all audio and video files on your system.
 
KMPlayer 3.5.0.77 has the DoS Vulnerability. Attackers exploit this vulnerability to cause the affected application to crash. This vulnerability may cause arbitrary code execution.
 
<* Source: vendor

Link: http://www.30soc.com/News/detail_7204.aspx
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
KMPlayer
--------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://kmplayer.kde.org/