Published: 26/06/2006 Updated: 19/10/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote malicious users to execute arbitrary code via a crafted .mid (MIDI) file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nullsoft winamp 2.91
nullsoft winamp 2.95
nullsoft winamp 5.02
nullsoft winamp 5.03
nullsoft winamp 5.08e
nullsoft winamp 5.09
nullsoft winamp 5.0
nullsoft winamp 2.90
nullsoft winamp 5.0.2
nullsoft winamp 5.01
nullsoft winamp 5.08c
nullsoft winamp 5.08d
nullsoft winamp 5.11
nullsoft winamp 5.12
nullsoft winamp 5.13
nullsoft winamp 5.2
nullsoft winamp 5.0.1
nullsoft winamp 5.05
nullsoft winamp 5.06
nullsoft winamp 5.07
nullsoft winamp 5.094
nullsoft winamp 5.1
nullsoft winamp 3.0
nullsoft winamp 3.1
nullsoft winamp 5.03a
nullsoft winamp 5.04
nullsoft winamp 5.091
nullsoft winamp 5.093
nullsoft winamp 5.21
nullsoft winamp

/* * ********************************************** * * Winamp 521 - Midi Buffer Overflow in_mididll * * ********************************************** * * PoC coded by: BassReFLeX * * Date: 19 Jun 2006 * * ********************************************** * */ #include <stdioh> #i ...

NVD-CWE-Other http://www.winamp.com/about/article.php?aid=10694 http://forums.winamp.com/showthread.php?threadid=248100 http://www.attrition.org/pipermail/vim/2006-June/000892.html http://www.attrition.org/pipermail/vim/2006-June/000893.html http://secunia.com/advisories/20722 https://www.exploit-db.com/exploits/1935 https://nvd.nist.gov https://www.exploit-db.com/exploits/1935/

CVE-2006-3228

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect