CVE-2006-6063: UN4SEEN Xmplay

High severity, CVSS 7.5. EPSS: 59% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long (1) FileName, and cause a crash via a long (2) DisplayName.

Affected products

• UN4SEEN Xmplay: up to and including 3.3.0.5

Published 2006-11-22. Last modified 2026-06-16.