Browse CVEs

HIGH 9.3 CVE-2010-3137EPSS 8% Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to exec… Winamp No fix yet Fix from $1,9502010-08-26 HIGH 9.3 CVE-2007-2498EPSS 10% libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of thes… Winamp No fix yet Fix from $1,9502007-05-04 HIGH 7.1 CVE-2007-2180 Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted WMV file. Winamp No fix yet Fix from $1,9502007-04-24 HIGH 9.3 CVE-2007-1921 LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT… Winamp Mitigation only Fix from $1,9502007-04-10 HIGH 9.3 CVE-2006-0708EPSS 7% Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containing a long … Winamp No fix yet Fix from $1,9502006-02-15 MEDIUM 5.1 CVE-2004-1150EPSS 9% Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a… Winamp No fix yet Fix from $1,6002004-12-31 HIGH 9.3 CVE-2003-1272 Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .b4s fi… Winamp Mitigation only Fix from $1,9502003-12-31 MEDIUM 5.0 CVE-2003-1274 Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Playstring parameter that contains… Winamp Mitigation only Fix from $1,6002003-12-31 HIGH 7.5 CVE-2003-0765EPSS 7% The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Trac… Winamp Mitigation only Fix from $1,9502003-09-17 HIGH 7.5 CVE-2002-1524 Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a lo… Winamp No fix yet Fix from $1,9502003-04-02 MEDIUM 6.4 CVE-2002-2392 Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference… Winamp No fix yet Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-1176 Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file. Winamp Mitigation only Fix from $1,9502002-12-26 HIGH 7.5 CVE-2002-1177 Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an… Winamp Mitigation only Fix from $1,9502002-12-26 HIGH 7.5 CVE-2002-0546 Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag i… Winamp No fix yet Fix from $1,9502002-07-03 HIGH 7.5 CVE-2002-0199 Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary … Shoutcast Server Mitigation only Fix from $1,9502002-05-16 MEDIUM 5.0 CVE-2001-1304 Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user… Shoutcast Server Mitigation only Fix from $1,6002001-08-03 HIGH 7.2 CVE-2000-0049 Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. Winamp Mitigation only Fix from $1,9502000-01-04