CVE-2012-10031

CVE-2012-10031 describes a stack-based buffer overflow in BlazeVideo HDTV Player Pro v6.6.0.3. This vulnerability occurs when the MediaPlayerCtrl.dll component improperly handles crafted .plf playlist files, specifically due to an unbounded strcpy operation during filename extraction. A successful exploit allows for arbitrary code execution under the context of the user. The vulnerability carries a high CVSS score of 8.6, indicating a critical risk. It can be exploited remotely with low attack complexity, requiring user interaction to open a malicious .plf file, and has a high impact on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit intelligence shows a Metasploit module exists, confirming exploitability. Community discussion is notably high, with 20 mentions, suggesting significant interest among security researchers despite no reported active exploitation or media coverage.