CVE-2008-5735: Coolplayer

High severity, CVSS 9.3. EPSS: 7.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.

Affected products

• Coolplayer Coolplayer: version 2.17 only; version 2.18 only; version 2.19 only

Published 2008-12-26. Last modified 2026-06-16.