QwikSec

Security Database

CVE

CWE

Training

CVE-2023-53875

Published: Dec 15, 2025

Modified: Apr 7, 2026

PUBLISHED

Description

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows attackers to execute arbitrary code through DNS spoofing. Attackers can redirect victims using a malicious URL shortcut and WebDAV technique to run a reverse shell with SMB server interaction.

Vendor	Product	Versions
Gomlab	GOM Player	affected `2.3.90.5360`

Weaknesses (CWE)

References

ExploitDB-51719

exploit

GOM Lab Vendor Webpage

technical-description

VulnCheck Advisory: GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.