Stack-Based Buffer Overflow in MyMP3Player by Steinberg
CVE-2010-20123

8.4HIGH

Key Information:

Vendor

Steinberg

Status
Mymp3player
Vendor
CVE Published:
21 August 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-20123?

Steinberg MyMP3Player version 3.0 (build 3.0.0.67) contains a critical vulnerability that results in a stack-based buffer overflow when processing .m3u playlist files. The application inadequately verifies the length of input data, allowing an attacker to craft a malicious .m3u file that, when opened by the user, can overwrite essential memory structures. This weakness can lead to the execution of arbitrary code, posing serious security risks to users.

Affected Version(s)

MyMP3Player * <= 3.0.0.67

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-20123 - Proof of Concept

CVE-2010-20123 - Proof of Concept

CVE-2010-20123 - Proof of Concept

References

https://www.exploit-db.com/exploits/11791
exploit
https://www.exploit-db.com/exploits/16633
exploit
https://www.exploit-db.com/exploits/14581
exploit

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

n3w7u
.
CVE-2010-20123 : Stack-Based Buffer Overflow in MyMP3Player by Steinberg