CVE-2008-3408: Coolplayer

Medium severity, CVSS 6.8. EPSS: 9.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file.

Affected products

• Coolplayer Coolplayer: any version

Published 2008-07-31. Last modified 2026-06-16.