$ cve CVE-2011-5006 JSON

CVE-2011-5006 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 6% (pctl 93)

Patch early

A public exploit exists.

Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file.

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	6.03% — more likely to be exploited than 93% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2011-12-25
Last modified	2026-06-16

Vendor	Product
qqplayer	qqplayer

Source	Title	Date
exploit-db	QQPLAYER Player 3.2 - PICT PnSize Buffer Overflow Windows (ASLR + DEP Bypass) (Metasploit)	2011-11-21