CVE-2010-2004: Bsplayer Bs.player

High severity, CVSS 9.3. EPSS: 9.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a skins file (.bsi), a different vulnerability than CVE-2009-1068.

Affected products

• Bsplayer Bs.player: version 2.51 only

Published 2010-05-20. Last modified 2026-06-16.