Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nullsoft winamp 5.08c vulnerabilities and exploits

(subscribe to this query)
5.1
CVSSv2
CVE-2004-1150
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 up to and including 5.08c allows malicious users to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.
Nullsoft Winamp 5.06Nullsoft Winamp 5.07Nullsoft Winamp 5.0Nullsoft Winamp 5.01Nullsoft Winamp 5.08cNullsoft Winamp 5.04Nullsoft Winamp 5.05Nullsoft Winamp 5.02Nullsoft Winamp 5.03
9.3
CVSSv2
CVE-2006-0708
Multiple buffer overflows in NullSoft Winamp 5.13 and previous versions allow remote malicious users to execute arbitrary code via (1) an m3u file containing a long URL ending in .wma, (2) a pls file containing a File1 field with a long URL ending in .wma, or (3) an m3u file with...
Nullsoft Winamp 5.01Nullsoft Winamp 5.02Nullsoft Winamp 5.08dNullsoft Winamp 5.08eNullsoft Winamp 5.13Nullsoft Winamp 5.03Nullsoft Winamp 5.04Nullsoft Winamp 5.09Nullsoft Winamp 5.091Nullsoft Winamp 5.05Nullsoft Winamp 5.06Nullsoft Winamp 5.093Nullsoft Winamp 5.094Nullsoft Winamp 5.0Nullsoft Winamp 5.07Nullsoft Winamp 5.08cNullsoft Winamp 5.11Nullsoft Winamp 5.12
9.3
CVSSv2
CVE-2006-3228
Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote malicious users to execute arbitrary code via a crafted .mid (MIDI) file.
Nullsoft Winamp 2.91Nullsoft Winamp 2.95Nullsoft Winamp 5.02Nullsoft Winamp 5.03Nullsoft Winamp 5.08eNullsoft Winamp 5.09Nullsoft Winamp 5.0Nullsoft Winamp 2.90Nullsoft Winamp 5.0.2Nullsoft Winamp 5.01Nullsoft Winamp 5.08cNullsoft Winamp 5.08dNullsoft Winamp 5.11Nullsoft Winamp 5.12Nullsoft Winamp 5.13Nullsoft Winamp 5.2Nullsoft Winamp 5.0.1Nullsoft Winamp 5.05Nullsoft Winamp 5.06Nullsoft Winamp 5.07Nullsoft Winamp 5.094Nullsoft Winamp 5.1
4.3
CVSSv2
CVE-2014-3442
Winamp 5.666 and previous versions allows remote malicious users to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Nullsoft Winamp 5.0Nullsoft Winamp 5.08cNullsoft Winamp 5.08dNullsoft Winamp 5.111Nullsoft Winamp 5.112Nullsoft Winamp 5.24Nullsoft Winamp 5.3Nullsoft Winamp 5.51Nullsoft Winamp 5.55Nullsoft Winamp 5.581Nullsoft Winamp 5.59Nullsoft Winamp 5.03Nullsoft Winamp 5.04Nullsoft Winamp 5.091Nullsoft Winamp 5.093Nullsoft Winamp 5.2Nullsoft Winamp 5.21Nullsoft Winamp 5.33Nullsoft Winamp 5.34Nullsoft Winamp 5.35Nullsoft Winamp 5.531Nullsoft Winamp 5.54
9.3
CVSSv2
CVE-2011-3834
Multiple integer overflows in the in_avi.dll plugin in Winamp prior to 5.623 allow remote malicious users to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.
Nullsoft Winamp 5.06Nullsoft Winamp 5.05Nullsoft Winamp 0.20aNullsoft Winamp 5.0Nullsoft Winamp 5.572Nullsoft Winamp 2.91Nullsoft Winamp 5.531Nullsoft Winamp 5.56Nullsoft Winamp 5.53Nullsoft Winamp 5.52Nullsoft Winamp 5.11Nullsoft Winamp 5.2Nullsoft Winamp 5.33Nullsoft Winamp 5.32Nullsoft Winamp 5.07Nullsoft Winamp 1.006Nullsoft Winamp 1.90Nullsoft Winamp 5.58Nullsoft Winamp 2.95Nullsoft Winamp 5.55Nullsoft Winamp 5.551Nullsoft Winamp 5.5
10
CVSSv2
CVE-2011-4857
Heap-based buffer overflow in the in_mod.dll plugin in Winamp prior to 5.623 allows remote malicious users to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Nullsoft Winamp 5.05Nullsoft Winamp 5.04Nullsoft Winamp 0.20aNullsoft Winamp 5.0Nullsoft Winamp 5.572Nullsoft Winamp 2.91Nullsoft Winamp 5.56Nullsoft Winamp 2.92Nullsoft Winamp 5.53Nullsoft Winamp 5.52Nullsoft Winamp 5.11Nullsoft Winamp 5.2Nullsoft Winamp 5.32Nullsoft Winamp 5.22Nullsoft Winamp 5.07Nullsoft Winamp 5.06Nullsoft Winamp 1.006Nullsoft Winamp 1.90Nullsoft Winamp 5.58Nullsoft Winamp 5.09Nullsoft Winamp 5.08eNullsoft Winamp 0.92
6.8
CVSSv2
CVE-2012-3890
The in_mod plugin in Winamp prior to 5.63 allows remote malicious users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
Nullsoft Winamp 5.56Nullsoft Winamp 5.55Nullsoft Winamp 5.51Nullsoft Winamp 5.31Nullsoft Winamp 5.3Nullsoft Winamp 5.111Nullsoft Winamp 5.112Nullsoft Winamp 5.09Nullsoft Winamp 5.08eNullsoft Winamp 5.093Nullsoft Winamp 5.091Nullsoft Winamp 2.9Nullsoft Winamp 5.59Nullsoft Winamp 5.581Nullsoft Winamp 5.54Nullsoft Winamp 5.35Nullsoft Winamp 5.34Nullsoft Winamp 5.21Nullsoft Winamp 5.24Nullsoft Winamp 5.13Nullsoft Winamp 5.07Nullsoft Winamp 5.572
6.8
CVSSv2
CVE-2012-3889
The in_mod plugin in Winamp prior to 5.63 allows remote malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
Nullsoft Winamp 5.61Nullsoft Winamp 5.59Nullsoft Winamp 5.54Nullsoft Winamp 5.36Nullsoft Winamp 5.35Nullsoft Winamp 5.22Nullsoft Winamp 5.21Nullsoft Winamp 5.24Nullsoft Winamp 5.13Nullsoft Winamp 5.07Nullsoft Winamp 5.08cNullsoft Winamp 5.0Nullsoft Winamp 2.91Nullsoft Winamp 2.0Nullsoft Winamp 0.20aNullsoft Winamp 0.92Nullsoft Winamp 5.56Nullsoft Winamp 5.55Nullsoft Winamp 5.52Nullsoft Winamp 5.51Nullsoft Winamp 5.32Nullsoft Winamp 5.31
9.3
CVSSv2
CVE-2010-4370
Multiple integer overflows in the in_midi plugin in Winamp prior to 5.6 allow remote malicious users to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.
Nullsoft Winamp 5.06Nullsoft Winamp 5.05Nullsoft Winamp 1.90Nullsoft Winamp 0.20aNullsoft Winamp 5.0Nullsoft Winamp 5.572Nullsoft Winamp 2.91Nullsoft Winamp 5.56Nullsoft Winamp 2.92Nullsoft Winamp 5.52Nullsoft Winamp 5.111Nullsoft Winamp 5.2Nullsoft Winamp 5.13Nullsoft Winamp 5.32Nullsoft Winamp 5.22Nullsoft Winamp 5.04Nullsoft Winamp 5.09Nullsoft Winamp 0.92Nullsoft Winamp 5.03Nullsoft Winamp 5.552Nullsoft Winamp 2.0Nullsoft Winamp 2.9
9.3
CVSSv2
CVE-2010-4372
Integer overflow in the in_nsv plugin in Winamp prior to 5.6 allows remote malicious users to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586.
Nullsoft Winamp 5.08eNullsoft Winamp 5.08dNullsoft Winamp 5.02Nullsoft Winamp 5.01Nullsoft Winamp 2.10Nullsoft Winamp 5.55Nullsoft Winamp 2.6Nullsoft Winamp 5.541Nullsoft Winamp 5.34Nullsoft Winamp 5.35Nullsoft Winamp 5.094Nullsoft Winamp 5.31Nullsoft Winamp 5.23Nullsoft WinampNullsoft Winamp 5.04Nullsoft Winamp 5.09Nullsoft Winamp 0.92Nullsoft Winamp 5.03Nullsoft Winamp 5.552Nullsoft Winamp 2.0Nullsoft Winamp 2.9Nullsoft Winamp 5.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook