CVE-2011-10024

CVE-2011-10024 describes a critical stack-based buffer overflow in MJM Core Player 2011, affecting its ability to safely parse specially crafted .s3m music files. This vulnerability, stemming from improper bounds checking, allows an unauthenticated attacker to achieve arbitrary code execution by enticing a user to open a malicious file. With a CVSS score of 8.4 (HIGH), the attack requires user interaction but bypasses DEP and ASLR protections using a ROP chain, leading to high impact on confidentiality, integrity, and availability. Exploit code is publicly available via a Metasploit module, and the vulnerability has garnered significant community discussion, indicating awareness and potential for exploitation despite not being on the KEV catalog.