CVE-2010-20042
Last modified
CVE-2010-20042 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler (SEH) chain, allowing an attacker to hijack execution flow and run arbitrary code.. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler (SEH) chain, allowing an attacker to hijack execution flow and run arbitrary code.
Metrics
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2010-20042?
How severe is CVE-2010-20042?
How do I fix CVE-2010-20042?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-2001Cross-site scripting (XSS) vulnerability in the CiviRegister…
- CVE-2010-20010Foxit PDF Reader before 4.2.0.0928 does not properly bound-c…8.4
- CVE-2010-2002Cross-site scripting (XSS) vulnerability in the Wordfilter m…
- CVE-2010-2003Cross-site scripting (XSS) vulnerability in misc/get_admin.p…
- CVE-2010-20034Gekko Manager FTP Client <= 0.77 contains a stack-based buff…8.5
- CVE-2010-2004Stack-based buffer overflow in BS.Global BS.Player 2.51 Buil…
- CVE-2010-20045FileWrangler <= 5.30 suffers from a stack-based buffer overf…8.5
- CVE-2010-20049LeapFTP < 3.1.x contains a stack-based buffer overflow vulne…9.3
- CVE-2010-2005Multiple PHP remote file inclusion vulnerabilities in DataLi…
- CVE-2010-20059FreeNAS 0.7.2 prior to revision 5543 includes an unauthentic…9.3
- CVE-2010-2006Directory traversal vulnerability in op/op.Login.php in Leto…
- CVE-2010-2007Multiple cross-site request forgery (CSRF) vulnerabilities i…
Are you affected by CVE-2010-20042?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST