PT-2025-34104 · Undefined · Undefined

Published 2025-08-20 · Updated 2026-05-26 · CVE-2011-10023

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions MJM QuickPlayer version 2010

Description MJM QuickPlayer (also known as MJM Player) contains a stack-based buffer overflow triggered by opening a malicious .s3m music file. This issue arises from improper bounds checking in the file parser, which allows memory to be overwritten and arbitrary code to be executed. Exploitation requires user interaction to open the file and utilizes Return-Oriented Programming (ROP) techniques to bypass Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2011-10023

Affected Products

Undefined

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-10023 · Security Note
• https://t.me/cveNotify/164689 · Telegram Post
• https://vulncheck.com/advisories/mjm-quickplayer-s3m-stack-based-buffer-overflow · Note
• https://mjm-software.com · Note
• https://web.archive.org/web/20111016194042/https://corelan.be/index.php/forum/security-advisories/corelan-11-003-mjm-quickplayer-2-3-2010-stack-buffer-overflow-s3m · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mjm_quickplayer_s3m.rb · Note
• https://exploit-db.com/exploits/17229 · Note