PatchTheCVEweb player vulnerabilities and fixes
Recent CVEs affecting web player, with upgrade or downgrade steps. 3 tracked.
Also searched as: webplayer.
web player has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-07-29. Highest priority: CVE-2014-10024 (score 53/100).
- CVE-2015-9288 MEDIUM 6.5 UPGRADE The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access
- CVE-2014-2544 HIGH 7.5 UPGRADE UPGRADE Unspecified vulnerability in Spotfire Web Player Engine, Spotfire Desktop, and Spotfire Server Authentication
- CVE-2014-10024 HIGH 7.5 MITIGATE MITIGATE Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and othe
FAQ
How do I fix web player vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web player being exploited right now?
None of the tracked web player CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web player CVE should I patch first?
CVE-2014-10024 currently ranks highest (53/100): Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and othe.