← Retour aux CVEs
CVE-2010-20042
N/ADescription
Xion Audio Player versions prior to 1.0.126 are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler (SEH) chain, allowing an attacker to hijack execution flow and run arbitrary code.
Details CVE
Score CVSS v3.1N/A
Publie8/20/2025
Derniere modification8/22/2025
Sourcenvd
Observations honeypot0
Faiblesses (CWE)
CWE-121
References
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/xion_m3u_sehbof.rb(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/14517(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/14633(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/15598(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/16653(disclosure@vulncheck.com)
https://www.r2.com.au/page/products/download/xion-audio-player/(disclosure@vulncheck.com)
https://www.vulncheck.com/advisories/xion-audio-player-unicode-stack-buffer-overflow(disclosure@vulncheck.com)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.