CVE-2013-5716
medium
CVSS v3
—
CVSS v4 NEW
—
VIR risk
5.3
Description
Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (application crash) via a crafted WAV file.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
GOMPlayer 2.2.53.5169 - '.wav' Crash (PoC)
Source code queued for fetch — refresh in a moment.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| gomlab | gom_player | {"endIncluding":"2.2.53.5169"} | |
| gomlab | gom_player | 2.0.6 | |
| gomlab | gom_player | 2.0.9 | |
| gomlab | gom_player | 2.0.11 | |
| gomlab | gom_player | 2.0.12 | |
| gomlab | gom_player | 2.1.1 | |
| gomlab | gom_player | 2.1.2 | |
| gomlab | gom_player | 2.1.3 | |
| gomlab | gom_player | 2.1.6 | |
| gomlab | gom_player | 2.1.8 | |
| gomlab | gom_player | 2.1.9.3753 | |
| gomlab | gom_player | 2.1.9.3754 | |
| gomlab | gom_player | 2.1.14.4525 | |
| gomlab | gom_player | 2.1.15.4610 | |
| gomlab | gom_player | 2.1.16.4631 | |
| gomlab | gom_player | 2.1.17.4710 | |
| gomlab | gom_player | 2.1.18.4762 | |
| gomlab | gom_player | 2.1.21.4846 | |
| gomlab | gom_player | 2.1.25.5015 | |
| gomlab | gom_player | 2.1.27.5031 | |
| gomlab | gom_player | 2.1.28.5039 | |
| gomlab | gom_player | 2.1.33.5071 | |
| gomlab | gom_player | 2.1.37.5085 | |
| gomlab | gom_player | 2.1.39.5101 | |
| gomlab | gom_player | 2.1.40.5106 | |
| gomlab | gom_player | 2.1.43.5119 | |
| gomlab | gom_player | 2.1.47.5133 | |
| gomlab | gom_player | 2.1.49.5139 | |
| gomlab | gom_player | 2.1.50.5145 | |
References
CWEs
CWE-20
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.