PatchTheCVE: coolplayerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2009-1449: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remothttps://patchthecve.com/cve/CVE-2009-1449.htmlhttps://patchthecve.com/cve/CVE-2009-1449.htmlTue, 16 Jun 2026 23:07:17 +0000HIGH 9.3: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code via a skin file (skin.ini) with a large PlaylistSkin parameter. NOTE: this may overlap CVE-2008-5735.CVE-2009-1437: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier https://patchthecve.com/cve/CVE-2009-1437.htmlhttps://patchthecve.com/cve/CVE-2009-1437.htmlTue, 16 Jun 2026 23:07:16 +0000HIGH 9.3: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.CVE-2008-5735: Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbithttps://patchthecve.com/cve/CVE-2008-5735.htmlhttps://patchthecve.com/cve/CVE-2008-5735.htmlTue, 16 Jun 2026 23:00:54 +0000HIGH 9.3: Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.CVE-2008-3408: Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attachttps://patchthecve.com/cve/CVE-2008-3408.htmlhttps://patchthecve.com/cve/CVE-2008-3408.htmlTue, 16 Jun 2026 22:55:46 +0000MEDIUM 6.8: Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file.