EUVD-2010-5315

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

BS.Player 2.57 Windows client has a buffer overflow in playlist import when parsing long web addresses in .m3u, enabling SEH overwrite.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2010-10016	30 Aug 202513:44	–	attackerkb
Circl	CVE-2010-10016	29 May 201815:50	–	circl
CNNVD	BS.Player 安全漏洞	30 Aug 202500:00	–	cnnvd
CVE	CVE-2010-10016	30 Aug 202513:44	–	cve
Cvelist	CVE-2010-10016 BS.Player 2.57 Buffer Overflow via M3U Playlist Import	30 Aug 202513:44	–	cvelist
NVD	CVE-2010-10016	30 Aug 202514:15	–	nvd
Positive Technologies	PT-2025-35368	30 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2010-10016	1 Sep 202514:16	–	redhatcve
Vulnrichment	CVE-2010-10016 BS.Player 2.57 Buffer Overflow via M3U Playlist Import	30 Aug 202513:44	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "5bad879d-cbc3-3791-8d5b-c431c944afbb",
        "vendor": {
          "name": "BS.Player"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "372bd640-5a3b-3e3f-919e-c11349fe9e28",
        "product": {
          "name": "BS.Player Free and Pro Editions"
        },
        "product_version": "* ≤2.57 (build 1051)"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/bsplayer_m3u.rb
exploit-db	www.exploit-db.com/exploits/15934
exploit-db	www.exploit-db.com/exploits/18375
bsplayer	www.bsplayer.com/
vulncheck	www.vulncheck.com/advisories/bs-player-buffer-overflow-via-m3u-playlist-import
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 410

EPSS0.66705

SSVC