Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-10008
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
MPlayer Lite r33064 M3U Stack-Based Buffer Overflow
Source: NVD (National Vulnerability Database)
Vulnerability Description
A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed by the player, particularly via drag-and-drop interaction. This flaw allows for control of the execution flow through SEH overwrite and a DEP bypass using a ROP chain that leverages known gadgets in loaded DLLs. Successful exploitation may result in arbitrary code execution with the privileges of the current user.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
The MPlayer Project MPlayer Lite 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
The MPlayer Project MPlayer Lite是The MPlayer Project公司的一款多媒体播放器。 The MPlayer Project MPlayer Lite r33064版本存在安全漏洞,该漏洞源于处理包含长http URL条目的M3U播放列表文件时边界检查不当,可能导致栈缓冲区溢出和任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
MPlayer ProjectMPlayer Lite r33064 -
II. Public POCs for CVE-2011-10008
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2011-10008
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2011-10008

No comments yet


Leave a comment