DVDXPlayer Pro 5.5 is susceptible to a local buffer overflow that exploits structured exception handling. A maliciously crafted .plf playlist file containing shellcode and a NOP sled can overflow an internal buffer and hijack the SEH chain, allowing the attacker to run arbitrary code with the privileges of the application. The flaw is a classic out‑of‑bounds write, documented as CWE‑787, and permits full code execution on the host system.

The vulnerability affects the DVDXPlayer Pro 5.5 software, distributed by Dvd‑X‑Player. Users running this version of the media player are at risk when they open or process .plf files from untrusted sources.

The CVSS vector scores the flaw as high severity (8.6), indicating significant impact. No EPSS score is available, but the local nature of the exploit means it can be triggered by a user who can place a crafted playlist file on the system. The vulnerability is not listed in the CISA KEV catalog, suggesting that known exploitation is not yet documented. Attackers would need to persuade a user to open a malicious file or run the application with such a file already present.