PT-2025-34096 · Undefined · Undefined
CVE-2010-20042
·
Published
2025-08-20
·
Updated
2026-05-26
CVSS v4.0
8.4
High
| Vector | AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Xion Audio Player versions prior to 1.0.126
Description
A Unicode-based stack buffer overflow occurs when opening a specially crafted .m3u playlist file. The file contains an excessively long string that overwrites the Structured Exception Handler (SEH) chain, which is a mechanism used to handle hardware and software exceptions, allowing an attacker to hijack the execution flow and run arbitrary code.
Recommendations
Update to version 1.0.126 or later.
Fix
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Undefined