CVE Feed

    Dashboard / CVE / CVE-2010-2009

    CVE-2010-2009

    Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party information.

    Published:May 21, 2010
    Last Modified:Apr 11, 2025
    EPS:May 21, 2010
    EPSS Score:0.12608
    CVSS Score:9.3

    Affected Products

    Vendor
    Bsplayer
    Product
    Bs.player

    Exploits

    http://www.securityfocus.com/bid/38568http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4932.phphttp://www.securityfocus.com/bid/38568http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4932.php

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High