CVE-2011-10022

SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception Handler (SEH) and execute arbitrary code. Exploitation requires the victim to open a media file that triggers an HTTP request to a malicious server, which responds with a crafted Content-Type header.

• CWE-120

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/splayer_content_type.rb
• https://www.exploit-db.com/exploits/17243
• https://www.exploit-db.com/exploits/17268
• https://www.splayer.org/
• https://www.vulncheck.com/advisories/splayer-content-type-header-buffer-overflow

Published

Aug 20, 2025

Last Modified

Jun 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-10017Snort Report versions < 1.3.2 contains a remote command exec…10
• CVE-2011-10018myBB version 1.6.4 was distributed with an unauthorized back…9.8
• CVE-2011-10019Spreecommerce versions prior to 0.60.2 contains a remote com…9.8
• CVE-2011-1002avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 a…
• CVE-2011-10020Kaillera Server version 0.86 is vulnerable to a denial-of-se…8.7
• CVE-2011-10021Magix Musik Maker 16 is vulnerable to a stack-based buffer o…8.4
• CVE-2011-10023MJM QuickPlayer (also known as MJM Player) version 2010 cont…8.4
• CVE-2011-10024MJM Core Player (likely now referred to as MJM Player) 2011 …8.4
• CVE-2011-10025Subtitle Processor 7.7.1 contains a buffer overflow vulnerab…8.5
• CVE-2011-10026Spreecommerce versions prior to 0.50.x contain a remote comm…9.8
• CVE-2011-10027AOL Desktop 9.6 contains a buffer overflow vulnerability in …8.4
• CVE-2011-10028The RealNetworks RealArcade platform includes an ActiveX con…8.7