CVE-2010-20042

🗓️ 20 Aug 2025 15:42:51Reported by VulnCheckType

CVE-2010-20042: Xion Audio Player before 1.0.126 Unicode stack overflow via .m3u, SEH hijack.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2010-20042	20 Aug 202515:42	–	attackerkb
Circl	CVE-2010-20042	29 May 201815:50	–	circl
CNNVD	Xion Audio Player 安全漏洞	20 Aug 202500:00	–	cnnvd
Cvelist	CVE-2010-20042 Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow	20 Aug 202515:42	–	cvelist
EUVD	EUVD-2010-5300	7 Oct 202500:30	–	euvd
NVD	CVE-2010-20042	20 Aug 202516:15	–	nvd
Positive Technologies	PT-2025-34096	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2010-20042	22 Aug 202516:35	–	redhatcve
Vulnrichment	CVE-2010-20042 Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow	20 Aug 202515:42	–	vulnrichment

Vulners

Node

xion audio_playerRange0–1.0.126

[
  {
    "defaultStatus": "unknown",
    "modules": [
      ".m3u/.m3u8 playlist parser"
    ],
    "product": "Audio Player",
    "vendor": "Xion",
    "versions": [
      {
        "lessThanOrEqual": "1.0.126",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
r2	www.r2.com.au/page/products/download/xion-audio-player/
exploit-db	www.exploit-db.com/exploits/15598
exploit-db	www.exploit-db.com/exploits/14517
exploit-db	www.exploit-db.com/exploits/16653
vulncheck	www.vulncheck.com/advisories/xion-audio-player-unicode-stack-buffer-overflow
exploit-db	www.exploit-db.com/exploits/14633
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/xion_m3u_sehbof.rb

26 May 2026 00:16Current

6.2Medium risk

Vulners AI Score6.2

CVSS 48.4

EPSS0.09703

SSVC

CWE-121