CVE-2007-0949: Itinysoft Studio Total Video Player

High severity, CVSS 10.0. EPSS: 16.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.

Affected products

• Itinysoft Studio Total Video Player: up to and including 1.03

Published 2007-02-15. Last modified 2026-06-16.