Read the docs

Winamp

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Winamp records in CISA KEV

No Winamp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Nullsoft Winamp · all components

Priority HIGH 78

Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construc…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.61275 Published 2008-01-22 No fix listed CWE-119
Priority LOW 36

Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via crafted unicode in a .mp4 file, with crafted tags, contained in a certain .rar archive, a related is…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03444 Published 2007-12-17 No fix listed CWE-119
Open these records in search →