EUVD-2010-5300

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Xion pre 1.0.126 Unicode stack overflow via crafted .m3u overwrites SEH to enable code execution

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2010-20042	20 Aug 202515:42	–	attackerkb
Circl	CVE-2010-20042	29 May 201815:50	–	circl
CNNVD	Xion Audio Player 安全漏洞	20 Aug 202500:00	–	cnnvd
CVE	CVE-2010-20042	20 Aug 202515:42	–	cve
Cvelist	CVE-2010-20042 Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow	20 Aug 202515:42	–	cvelist
NVD	CVE-2010-20042	20 Aug 202516:15	–	nvd
Positive Technologies	PT-2025-34096	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2010-20042	22 Aug 202516:35	–	redhatcve
Vulnrichment	CVE-2010-20042 Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow	20 Aug 202515:42	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "a14aea2f-d111-33a5-8aff-ec70615c3fdb",
        "vendor": {
          "name": "Xion"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "24f73ef8-395c-3d07-9382-db7439c77c88",
        "product": {
          "name": "Audio Player"
        },
        "product_version": "* ≤1.0.126"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/xion_m3u_sehbof.rb
exploit-db	www.exploit-db.com/exploits/14517
exploit-db	www.exploit-db.com/exploits/14633
exploit-db	www.exploit-db.com/exploits/15598
exploit-db	www.exploit-db.com/exploits/16653
r2	www.r2.com.au/page/products/download/xion-audio-player/
vulncheck	www.vulncheck.com/advisories/xion-audio-player-unicode-stack-buffer-overflow
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 48.4

EPSS0.09703

SSVC