What is GHSA-prm3-j874-4mpg?

GHSA-prm3-j874-4mpg is a security advisory published by GitHub Security Advisories with High severity. AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows...

Which CVE IDs does GHSA-prm3-j874-4mpg cover?

GHSA-prm3-j874-4mpg covers the following CVE IDs: CVE-2019-25735. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-prm3-j874-4mpg?

GHSA-prm3-j874-4mpg has a CVSS v3 base score of 8.4, published by GitHub Security Advisories.

GHSA-prm3-j874-4mpgHighCVSS 8.4

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows...

Vendor

GitHub Security Advisories

Published

June 4, 2026

Last Modified

June 4, 2026

🔗 CVE IDs covered (1)

CVE-2019-25735 →

📋 Description

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception handling pointers by supplying an excessively long URL string. Attackers can craft a malicious URL, paste it into the Open URL dialog, and trigger SEH-based code execution to run arbitrary commands with user privileges.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2019-25735
https://www.allplayer.org
https://www.exploit-db.com/exploits/46668
https://www.vulncheck.com/advisories/allplayer-local-buffer-overflow-via-seh-unicode
http://allplayer.org/Download/ALLPlayerEN.exe
https://github.com/advisories/GHSA-prm3-j874-4mpg