CVE-2011-10024CWE-121

MJM Core Player 2011 .s3m File Stack-Based Buffer Overflow

High · published August 20, 2025

CVSS v4.0
8.4
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute arbitrary code. Exploitation is triggered when a user opens a malicious .s3m file, and the exploit bypasses DEP and ASLR protections using a ROP chain.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00420 · 34.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-20T15:37Z
EPSS history
Timeline
  • 20 AUG 15:37Z
    MJM Core Player 2011 .s3m File Stack-Based Buffer Overflow
    cvelistv5