Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown
CVE-2014-3442
Disclosure Date: May 23, 2014 (last updated October 05, 2023)
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
0
Attacker Value
Unknown
CVE-2013-4694
Disclosure Date: April 16, 2014 (last updated October 05, 2023)
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
0
Attacker Value
Unknown
CVE-2012-3889
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
0
Attacker Value
Unknown
CVE-2012-3890
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
0
Attacker Value
Unknown
CVE-2011-3834
Disclosure Date: December 16, 2011 (last updated October 04, 2023)
Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.
0
Attacker Value
Unknown
CVE-2011-4857
Disclosure Date: December 16, 2011 (last updated October 04, 2023)
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2010-3137
Disclosure Date: August 26, 2010 (last updated October 04, 2023)
Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wnaspi32.dll that is located in the same folder as a .669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf or .cda file.
0