MJM QuickPlayer (likely now referred to as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code. Exploitation requires user interaction to open the file with a crafted payload that bypasses DEP and ASLR protections using ROP techniques.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2011-10023 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious .s3m music file and convince a user to open it using MJM QuickPlayer. The crafted file can leverage the stack-based buffer overflow to overwrite memory, allowing the execution of arbitrary code on the user’s system.
Affected Products
- MJM QuickPlayer 2010: A media player that is vulnerable to stack-based buffer overflow when processing .s3m files.
Mitigation
To mitigate this vulnerability, users should avoid opening .s3m files from untrusted sources and consider using alternative media players that do not have this vulnerability. Additionally, keeping software updated can help protect against known vulnerabilities.