CVE-2010-10016
CRITICALBS.Player 2.57 - Buffer Overflow
Title source: llmDescription
BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properly validate the length of playlist entries, resulting in a buffer overflow condition. This flaw occurs during parsing of long URLs embedded in the playlist, allowing overwrite of Structured Exception Handler (SEH) records. The vulnerability is triggered upon opening a crafted playlist file and affects the Unicode parsing logic in the Windows client.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/18375
exploitdb
WORKING POC
VERIFIED
by C4SS!0 G0M3S · pythonlocalwindows
https://www.exploit-db.com/exploits/15934
metasploit
WORKING POC
NORMAL
by C4SS!0 G0M3S, Chris Gabriel · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/bsplayer_m3u.rb
References (5)
Scores
CVSS v4
10.0
EPSS
0.5485
EPSS Percentile
98.1%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-120
Status
published
Products (1)
BS.Player/BS.Player Free and Pro Editions
< 2.57 (build 1051)
Published
Aug 30, 2025
Tracked Since
Feb 18, 2026