CVE-2009-2566: Tfm Mmplayer

High severity, CVSS 9.3. EPSS: 31.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.

Affected products

• Tfm Mmplayer: version 2.0 only

Published 2009-07-21. Last modified 2026-06-16.