CVE-2018-9128

DVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to CVE-2007-3068.

• CWE-119

• http://packetstormsecurity.com/files/152177/DVD-X-Player-5.5.3-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://0day4u.wordpress.com/2018/03/30/buffer-overflow-on-dvd-x-player-standard-5-5-3-9/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44438/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46584/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/152177/DVD-X-Player-5.5.3-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://0day4u.wordpress.com/2018/03/30/buffer-overflow-on-dvd-x-player-standard-5-5-3-9/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44438/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46584/Exploit, Third Party Advisory, VDB Entry

Published

Apr 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9120In Crea8social 2018.2, there is Stored Cross-Site Scripting …
• CVE-2018-9121In Crea8social 2018.2, there is Stored Cross-Site Scripting …
• CVE-2018-9122In Crea8social 2018.2, there is Reflected Cross-Site Scripti…
• CVE-2018-9123In Crea8social 2018.2, there is Stored Cross-Site Scripting …
• CVE-2018-9126The DNNArticle module 11 for DNN (formerly DotNetNuke) allow…
• CVE-2018-9127Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wild…
• CVE-2018-9129ZyXEL ZyWALL/USG series devices have a Bleichenbacher vulner…
• CVE-2018-9130IBOS 4.4.3 has XSS via a company full name.
• CVE-2018-9131Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-9132libming 0.4.8 has a NULL pointer dereference in the getInt f…
• CVE-2018-9133ImageMagick 7.0.7-26 Q16 has excessive iteration in the Deco…
• CVE-2018-9134file_manage_control.php in DedeCMS 5.7 has CSRF in an fmdo=r…