GCVE - cpe:2.3:a:mplayer_project:mplayer

Approved changes feed: RSS · Atom

cpe:2.3:a:mplayer_project:mplayer_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mplayer Project (`b7c0b839-369e-5deb-adda-30a3c659fbab`)
Product	Mplayer Lite (`9e4e9f38-abe4-5b52-9c24-9a2003fec5ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-10008`	vulnerable	2026-06-08 04:56:40.576595	MPlayer Lite r33064 M3U Stack-Based Buffer Overflow A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed by the player, particularly via drag-and-drop interaction. This flaw allows for control of the execution flow through SEH overwrite and a DEP bypass using a ROP chain that leverages known gadgets in loaded DLLs. Successful exploitation may result in arbitrary code execution with the privileges of the current user. Published: 2025-07-31T14:58:28.548Z Updated: 2026-04-07T14:01:59.344Z Open on db.gcve.eu Reference links https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mplayer_m3u_bof.rb https://www.exploit-db.com/exploits/17013 https://www.vulncheck.com/advisories/mplayer-lite-r33064-m3u-stack-based-buffer-overflow	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.