VulnerabilityModified

CVE-2012-1774

Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and attack vectors, a different vulnerability than CVE-2007-5779 and CVE-2012-1264.

HIGH 10.0EPSS 7.23%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (7.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and attack vectors, a different vulnerability than CVE-2007-5779 and CVE-2012-1264.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 7.23% probability · 94th percentile
CISA KEV: Not listed
Affected: gomlab/gom media player
Source: cve@mitre.org

References

http://osvdb.org/80203
http://player.gomlab.com/eng/download/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74120
http://osvdb.org/80203
http://player.gomlab.com/eng/download/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74120

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.