Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nullsoft winamp 5.541 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2009-0263
Multiple buffer overflows in Winamp 5.541 and previous versions allow remote malicious users to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.
Nullsoft Winamp 2.24Nullsoft Winamp 2.10Nullsoft Winamp 2.62Nullsoft Winamp 2.64Nullsoft Winamp 5.0Nullsoft Winamp 3.1Nullsoft Winamp 2.73Nullsoft Winamp 2.91Nullsoft Winamp 2.75Nullsoft Winamp 2.76Nullsoft Winamp 5.08dNullsoft Winamp 5.08cNullsoft Winamp 5.08Nullsoft Winamp 5.01Nullsoft Winamp 5.5Nullsoft Winamp 5.51Nullsoft Winamp 5.112Nullsoft Winamp 5.31Nullsoft Winamp 5.52Nullsoft Winamp 5.53Nullsoft Winamp 2.5eNullsoft Winamp 2.60
9.3
CVSSv2
CVE-2009-1788
Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 up to and including 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC f...
Nullsoft Winamp 5.541Nullsoft Winamp 5.51Mega-nerd Libsndfile 1.0.17Mega-nerd Libsndfile 1.0.16Nullsoft Winamp 5.552Mega-nerd Libsndfile 1.0.15Nullsoft Winamp 5.55Nullsoft Winamp 5.54Mega-nerd Libsndfile 1.0.19Mega-nerd Libsndfile 1.0.18Nullsoft Winamp 5.52Nullsoft Winamp 5.5
9.3
CVSSv2
CVE-2009-1791
Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 up to and including 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via an AIF...
Mega-nerd Libsndfile 1.0.16Mega-nerd Libsndfile 1.0.15Nullsoft Winamp 5.552Mega-nerd Libsndfile 1.0.19Nullsoft Winamp 5.51Nullsoft Winamp 5.52Mega-nerd Libsndfile 1.0.18Mega-nerd Libsndfile 1.0.17Nullsoft Winamp 5.5Nullsoft Winamp 5.55Nullsoft Winamp 5.54Nullsoft Winamp 5.541
4.3
CVSSv2
CVE-2008-3567
Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp prior to 5.541 allows remote malicious users to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags.
Nullsoft Winamp 2.50Nullsoft Winamp 2.5eNullsoft Winamp 2.70Nullsoft Winamp 2.71Nullsoft Winamp 2.78Nullsoft Winamp 2.79Nullsoft Winamp 3.1Nullsoft Winamp 5.0Nullsoft Winamp 5.04Nullsoft Winamp 5.05Nullsoft Winamp 5.09Nullsoft Winamp 5.091Nullsoft Winamp 5.13Nullsoft Winamp 5.2Nullsoft Winamp 5.32Nullsoft Winamp 5.33Nullsoft Winamp 5.53Nullsoft WinampNullsoft Winamp 2.0Nullsoft Winamp 2.62Nullsoft Winamp 2.64Nullsoft Winamp 2.74
4.3
CVSSv2
CVE-2014-3442
Winamp 5.666 and previous versions allows remote malicious users to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Nullsoft Winamp 5.0Nullsoft Winamp 5.08cNullsoft Winamp 5.08dNullsoft Winamp 5.111Nullsoft Winamp 5.112Nullsoft Winamp 5.24Nullsoft Winamp 5.3Nullsoft Winamp 5.51Nullsoft Winamp 5.55Nullsoft Winamp 5.581Nullsoft Winamp 5.59Nullsoft Winamp 5.03Nullsoft Winamp 5.04Nullsoft Winamp 5.091Nullsoft Winamp 5.093Nullsoft Winamp 5.2Nullsoft Winamp 5.21Nullsoft Winamp 5.33Nullsoft Winamp 5.34Nullsoft Winamp 5.35Nullsoft Winamp 5.531Nullsoft Winamp 5.54
9.3
CVSSv2
CVE-2011-3834
Multiple integer overflows in the in_avi.dll plugin in Winamp prior to 5.623 allow remote malicious users to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.
Nullsoft Winamp 5.06Nullsoft Winamp 5.05Nullsoft Winamp 0.20aNullsoft Winamp 5.0Nullsoft Winamp 5.572Nullsoft Winamp 2.91Nullsoft Winamp 5.531Nullsoft Winamp 5.56Nullsoft Winamp 5.53Nullsoft Winamp 5.52Nullsoft Winamp 5.11Nullsoft Winamp 5.2Nullsoft Winamp 5.33Nullsoft Winamp 5.32Nullsoft Winamp 5.07Nullsoft Winamp 1.006Nullsoft Winamp 1.90Nullsoft Winamp 5.58Nullsoft Winamp 2.95Nullsoft Winamp 5.55Nullsoft Winamp 5.551Nullsoft Winamp 5.5
10
CVSSv2
CVE-2011-4857
Heap-based buffer overflow in the in_mod.dll plugin in Winamp prior to 5.623 allows remote malicious users to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Nullsoft Winamp 5.05Nullsoft Winamp 5.04Nullsoft Winamp 0.20aNullsoft Winamp 5.0Nullsoft Winamp 5.572Nullsoft Winamp 2.91Nullsoft Winamp 5.56Nullsoft Winamp 2.92Nullsoft Winamp 5.53Nullsoft Winamp 5.52Nullsoft Winamp 5.11Nullsoft Winamp 5.2Nullsoft Winamp 5.32Nullsoft Winamp 5.22Nullsoft Winamp 5.07Nullsoft Winamp 5.06Nullsoft Winamp 1.006Nullsoft Winamp 1.90Nullsoft Winamp 5.58Nullsoft Winamp 5.09Nullsoft Winamp 5.08eNullsoft Winamp 0.92
6.8
CVSSv2
CVE-2012-3889
The in_mod plugin in Winamp prior to 5.63 allows remote malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
Nullsoft Winamp 5.61Nullsoft Winamp 5.59Nullsoft Winamp 5.54Nullsoft Winamp 5.36Nullsoft Winamp 5.35Nullsoft Winamp 5.22Nullsoft Winamp 5.21Nullsoft Winamp 5.24Nullsoft Winamp 5.13Nullsoft Winamp 5.07Nullsoft Winamp 5.08cNullsoft Winamp 5.0Nullsoft Winamp 2.91Nullsoft Winamp 2.0Nullsoft Winamp 0.20aNullsoft Winamp 0.92Nullsoft Winamp 5.56Nullsoft Winamp 5.55Nullsoft Winamp 5.52Nullsoft Winamp 5.51Nullsoft Winamp 5.32Nullsoft Winamp 5.31
6.8
CVSSv2
CVE-2012-3890
The in_mod plugin in Winamp prior to 5.63 allows remote malicious users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
Nullsoft Winamp 5.56Nullsoft Winamp 5.55Nullsoft Winamp 5.51Nullsoft Winamp 5.31Nullsoft Winamp 5.3Nullsoft Winamp 5.111Nullsoft Winamp 5.112Nullsoft Winamp 5.09Nullsoft Winamp 5.08eNullsoft Winamp 5.093Nullsoft Winamp 5.091Nullsoft Winamp 2.9Nullsoft Winamp 5.59Nullsoft Winamp 5.581Nullsoft Winamp 5.54Nullsoft Winamp 5.35Nullsoft Winamp 5.34Nullsoft Winamp 5.21Nullsoft Winamp 5.24Nullsoft Winamp 5.13Nullsoft Winamp 5.07Nullsoft Winamp 5.572
9.3
CVSSv2
CVE-2010-2586
Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp prior to 5.6 allow remote malicious users to execute arbitrary code via a crafted Table of Contents (TOC) in a (1) NSV stream or (2) NSV file that triggers a heap-based buffer overflow.
Nullsoft Winamp 5.06Nullsoft Winamp 5.05Nullsoft Winamp 1.90Nullsoft Winamp 0.20aNullsoft Winamp 5.572Nullsoft Winamp 2.91Nullsoft Winamp 5.56Nullsoft Winamp 2.92Nullsoft Winamp 5.53Nullsoft Winamp 5.52Nullsoft Winamp 5.2Nullsoft Winamp 5.13Nullsoft Winamp 5.32Nullsoft Winamp 5.22Nullsoft Winamp 5.04Nullsoft Winamp 5.09Nullsoft Winamp 5.0Nullsoft Winamp 0.92Nullsoft Winamp 5.552Nullsoft Winamp 2.0Nullsoft Winamp 2.9Nullsoft Winamp 5.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook