CVE-2010-20111
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-21

Last updated on: 2025-08-22

Assigner: VulnCheck

Description
Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser. When opening a .pls file containing an excessively long string in the File1 field, the application fails to properly validate input length, resulting in corruption of the Structured Exception Handler (SEH) on the stack. This flaw may allow an attacker to control execution flow when the file is opened, potentially leading to arbitrary code execution.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-21
Last Modified
2025-08-22
Generated
2026-05-06
AI Q&A
2025-08-21
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
digital_music_pad digital_music_pad 8.2.3.3.4
multimedia_soft adjmmseng 8.2.0.5
multimedia_soft audio_dj_studio_for_net 4.5
multimedia_soft audio_sound_suite_for_net 2010
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a stack-based buffer overflow in Digital Music Pad v8.2.3.3.4's playlist file parser. When the application opens a .pls file with an excessively long string in the File1 field, it does not properly check the input length. This causes corruption of the Structured Exception Handler (SEH) on the stack, which may allow an attacker to control the program's execution flow and potentially execute arbitrary code.


How can this vulnerability impact me? :

If exploited, this vulnerability can allow an attacker to execute arbitrary code on your system when you open a specially crafted .pls playlist file in Digital Music Pad. This could lead to unauthorized actions such as installing malware, stealing data, or taking control of your system.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart