CVE-2023-1745CWE-427

KMPlayer SHFOLDER.dll uncontrolled search path

Medium · published March 30, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unknown processing in the library SHFOLDER.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224633 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.6th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-03-30T23:00Z
EPSS history
Timeline
  • 30 MAR 23:00Z
    KMPlayer SHFOLDER.dll uncontrolled search path
    cvelistv5