Summary
Detail | |||
---|---|---|---|
Vendor | Nullsoft | First view | 2004-12-31 |
Product | Winamp | Last view | 2014-05-23 |
Version | 5.0.2 | Type | Application |
Update | * | ||
Edition | * | ||
Language | * | ||
Sofware Edition | * | ||
Target Software | * | ||
Target Hardware | * | ||
Other | * | ||
CPE Product | cpe:2.3:a:nullsoft:winamp |
Activity : Overall
Related : CVE
Date | Alert | Description | |
---|---|---|---|
4.3 | 2014-05-23 | CVE-2014-3442 | Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s. |
7.5 | 2014-04-16 | CVE-2013-4694 | Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk. |
7.5 | 2012-07-22 | CVE-2012-4045 | Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file. |
6.8 | 2012-07-11 | CVE-2012-3890 | The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file. |
6.8 | 2012-07-11 | CVE-2012-3889 | The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file. |
10 | 2011-12-16 | CVE-2011-4857 | Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information. |
9.3 | 2011-12-16 | CVE-2011-3834 | Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow. |
4.3 | 2010-12-02 | CVE-2010-4374 | The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length. |
4.3 | 2010-12-02 | CVE-2010-4373 | The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via crafted (1) metadata or (2) albumart in an invalid MP4 file. |
9.3 | 2010-12-02 | CVE-2010-4372 | Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586. |
9.3 | 2010-12-02 | CVE-2010-4371 | Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box. |
9.3 | 2010-12-02 | CVE-2010-4370 | Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow. |
9.3 | 2010-12-02 | CVE-2010-2586 | Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents (TOC) in a (1) NSV stream or (2) NSV file that triggers a heap-based buffer overflow. |
9.3 | 2010-11-05 | CVE-2010-1523 | Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2) video stream. |
9.3 | 2009-12-18 | CVE-2009-4356 | Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file. |
9.3 | 2009-12-18 | CVE-2009-3997 | Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow. |
9.3 | 2009-12-18 | CVE-2009-3996 | Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file. |
9.3 | 2009-12-18 | CVE-2009-3995 | Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details are obtained from third party information. |
9.3 | 2009-05-29 | CVE-2009-1831 | The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow. |
10 | 2009-01-23 | CVE-2009-0263 | Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file. |
4.3 | 2008-08-10 | CVE-2008-3567 | Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScript in id3 tags. |
7.5 | 2008-08-01 | CVE-2008-3441 | Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. |
9.3 | 2007-10-12 | CVE-2007-4619 | Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow. |
9.3 | 2006-06-26 | CVE-2006-3228 | Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file. |
9.3 | 2005-07-19 | CVE-2005-2310 | Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE. |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
52% (12) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
34% (8) | CWE-189 | Numeric Errors |
4% (1) | CWE-399 | Resource Management Errors |
4% (1) | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
4% (1) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
Open Source Vulnerability Database (OSVDB)
id | Description |
---|---|
77638 | Winamp in_mod.dll Plugin Song Message Data Impulse Tracker (IT) File Handling... |
77637 | Winamp in_avi.dll Plugin RIFF INFO Chunk Size Memory Allocation AVI File Hand... |
77636 | Winamp in_avi.dll Plugin Stream Header Value Memory Allocation AVI File Handl... |
69598 | Winamp in_mp4 Plugin Crafted MP4 File Handling Remote DoS |
69597 | Winamp in_nsv Plugin NSV Metadata Memory Allocation Overflow |
69535 | Winamp in_midi Plugin MIDI File Format Processing Overflow |
69534 | Winamp in_nsv.dll NSV Table of Contents Data Overflow |
69206 | Winamp vp6.w5s Crafted VP6 File / Stream Handling Overflow |
68645 | Winamp in_mod.dll MTM File Handling Overflow |
68644 | Winamp in_mkv.dll MKV File Handling Overflow |
62139 | Mikmod libmikmod load_ult.c Ultratracker File Handling Overflow |
62138 | Mikmod libmikmod load_it.c Impulse Tracker File Handling Overflow |
61185 | Winamp Module Decoder Plug-in PNG / JPEG Handling Overflows |
61184 | Winamp Module Decoder Plug-in Multiple File Handling Overflows |
54902 | Winamp Modern Skins Support Module (gen_ff.dll) MAKI File Handling Overflow |
51276 | Winamp AIFF File Handling Overflow |
48321 | Winamp Update Authenticity Verification Weakness |
47347 | Winamp NowPlaying Feature Media File Metadata XSS |
41694 | Free Lossless Audio Codec (FLAC) libFLAC FLAC File Handling Multiple Overflows |
26727 | Winamp in_midi.dll MIDI File Processing Overflow |
17897 | Winamp MP3 ID3v2 Tag Handling Overflow |
4944 | Winamp Fasttracker 2 Plug-In in_mod.dll Overflow |
ExploitDB Exploits
id | Description |
---|---|
26558 | WinAmp 5.63 - Stack-based Buffer Overflow |
OpenVAS Exploits
id | Description |
---|---|
2012-08-02 | Name : Winamp 'AVI' File Multiple Heap-based Buffer Overflow Vulnerabilities File : nvt/gb_winamp_avi_mult_bof_vuln.nasl |
2011-12-22 | Name : Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities File : nvt/secpod_winamp_avi_and_it_file_bof_vuln.nasl |
2011-08-09 | Name : CentOS Update for mikmod CESA-2010:0720 centos5 i386 File : nvt/gb_CESA-2010_0720_mikmod_centos5_i386.nasl |
2010-12-09 | Name : Winamp Multiple Vulnerabilities File : nvt/gb_winamp_mult_vuln.nasl |
2010-12-02 | Name : Fedora Update for libmikmod FEDORA-2010-13673 File : nvt/gb_fedora_2010_13673_libmikmod_fc14.nasl |
2010-11-16 | Name : Winamp VP6 Content Parsing Buffer Overflow Vulnerability File : nvt/gb_winamp_vp6_codec_bof_vuln.nasl |
2010-10-01 | Name : CentOS Update for mikmod CESA-2010:0720 centos3 i386 File : nvt/gb_CESA-2010_0720_mikmod_centos3_i386.nasl |
2010-10-01 | Name : CentOS Update for mikmod CESA-2010:0720 centos4 i386 File : nvt/gb_CESA-2010_0720_mikmod_centos4_i386.nasl |
2010-10-01 | Name : RedHat Update for mikmod RHSA-2010:0720-01 File : nvt/gb_RHSA-2010_0720-01_mikmod.nasl |
2010-10-01 | Name : Ubuntu Update for libmikmod vulnerabilities USN-995-1 File : nvt/gb_ubuntu_USN_995_1.nasl |
2010-09-10 | Name : Fedora Update for libmikmod FEDORA-2010-13702 File : nvt/gb_fedora_2010_13702_libmikmod_fc13.nasl |
2010-08-21 | Name : Debian Security Advisory DSA 2081-1 (libmikmod) File : nvt/deb_2081_1.nasl |
2010-08-20 | Name : Mandriva Update for libmikmod MDVSA-2010:151 (libmikmod) File : nvt/gb_mandriva_MDVSA_2010_151.nasl |
2010-07-22 | Name : Debian Security Advisory DSA 2071-1 (libmikmod) File : nvt/deb_2071_1.nasl |
2009-12-23 | Name : Winamp Module Decoder Plug-in Multiple Buffer Overflow Vulnerabilities File : nvt/secpod_winamp_mult_bof_vuln_dec09.nasl |
2009-10-13 | Name : SLES10: Security update for flac File : nvt/sles10_flac.nasl |
2009-10-10 | Name : SLES9: Security update for flac File : nvt/sles9p5016440.nasl |
2009-06-04 | Name : Winamp gen_ff.dll Buffer Overflow Vulnerability File : nvt/secpod_winamp_genff_bof_vuln.nasl |
2009-04-09 | Name : Mandriva Update for flac MDKSA-2007:214 (flac) File : nvt/gb_mandriva_MDKSA_2007_214.nasl |
2009-03-23 | Name : Ubuntu Update for flac vulnerability USN-540-1 File : nvt/gb_ubuntu_USN_540_1.nasl |
2009-02-27 | Name : Fedora Update for flac FEDORA-2007-730 File : nvt/gb_fedora_2007_730_flac_fc6.nasl |
2009-02-27 | Name : Fedora Update for flac FEDORA-2007-2596 File : nvt/gb_fedora_2007_2596_flac_fc7.nasl |
2009-01-29 | Name : Winamp AIFF File Multiple Buffer Overflow Vulnerabilities File : nvt/secpod_winamp_mult_bof_vuln.nasl |
2008-09-24 | Name : Gentoo Security Advisory GLSA 200711-15 (flac) File : nvt/glsa_200711_15.nasl |
2008-09-04 | Name : FreeBSD Ports: flac File : nvt/freebsd_flac.nasl |
Snort® IPS/IDS
Date | Description |
---|---|
2020-12-08 | Winamp MAKI parsing integer overflow attempt RuleID : 52444 - Type : FILE-OTHER - Revision : 1 |
2014-01-10 | Nullsoft Winamp XM file buffer overflow attempt RuleID : 2550-community - Type : FILE-OTHER - Revision : 10 |
2014-01-10 | Nullsoft Winamp XM file buffer overflow attempt RuleID : 2550 - Type : FILE-OTHER - Revision : 10 |
2014-01-10 | AVI file chunk length integer overflow attempt RuleID : 24955 - Type : FILE-MULTIMEDIA - Revision : 4 |
2014-01-10 | AVI file chunk length integer overflow attempt RuleID : 21168 - Type : FILE-MULTIMEDIA - Revision : 7 |
2014-01-10 | Nullsoft Winamp ID3v2 Tag Handling Buffer Overflow attempt RuleID : 17351 - Type : FILE-OTHER - Revision : 14 |
2014-01-10 | Nullsoft Winamp midi file header overflow attempt RuleID : 16027 - Type : FILE-MULTIMEDIA - Revision : 14 |
2014-01-10 | Nullsoft Winamp AIFF parsing heap buffer overflow attempt RuleID : 15901 - Type : FILE-MULTIMEDIA - Revision : 15 |
2014-01-10 | Winamp MAKI parsing integer overflow attempt RuleID : 15433 - Type : FILE-OTHER - Revision : 7 |
2014-01-10 | FLAC libFLAC picture metadata buffer overflow attempt RuleID : 12745 - Type : FILE-MULTIMEDIA - Revision : 13 |
2014-01-10 | FLAC libFLAC VORBIS string buffer overflow attempt RuleID : 12744 - Type : FILE-MULTIMEDIA - Revision : 13 |
2014-01-10 | FLAC libFLAC picture description metadata buffer overflow attempt RuleID : 12743 - Type : FILE-MULTIMEDIA - Revision : 13 |
Nessus® Vulnerability Scanner
id | Description |
---|---|
2013-07-12 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2010-0720.nasl - Type: ACT_GATHER_INFO |
2013-07-12 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2007-0975.nasl - Type: ACT_GATHER_INFO |
2013-07-09 | Name: The remote Windows host contains a multimedia application that is affected by... File: winamp_564.nasl - Type: ACT_GATHER_INFO |
2012-08-01 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20100928_mikmod_on_SL3_x.nasl - Type: ACT_GATHER_INFO |
2012-08-01 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20071022_flac_on_SL5_x.nasl - Type: ACT_GATHER_INFO |
2012-06-28 | Name: The remote Windows host contains a multimedia application that is affected by... File: winamp_563.nasl - Type: ACT_GATHER_INFO |
2011-12-21 | Name: The remote Windows host contains a multimedia application that is affected by... File: winamp_5623.nasl - Type: ACT_GATHER_INFO |
2010-12-02 | Name: The remote SuSE 11 host is missing one or more security updates. File: suse_11_libmikmod-100422.nasl - Type: ACT_GATHER_INFO |
2010-11-30 | Name: The remote Windows host contains a multimedia application that is affected by... File: winamp_56.nasl - Type: ACT_GATHER_INFO |
2010-10-28 | Name: The remote Windows host contains a multimedia application that is affected by... File: winamp_559_3033.nasl - Type: ACT_GATHER_INFO |
2010-10-11 | Name: The remote SuSE 10 host is missing a security-related patch. File: suse_libmikmod-7004.nasl - Type: ACT_GATHER_INFO |
2010-10-06 | Name: The remote CentOS host is missing one or more security updates. File: centos_RHSA-2010-0720.nasl - Type: ACT_GATHER_INFO |
2010-10-06 | Name: The remote Red Hat host is missing one or more security updates. File: redhat-RHSA-2010-0720.nasl - Type: ACT_GATHER_INFO |
2010-10-06 | Name: The remote Ubuntu host is missing one or more security-related patches. File: ubuntu_USN-995-1.nasl - Type: ACT_GATHER_INFO |
2010-09-09 | Name: The remote Fedora host is missing a security update. File: fedora_2010-13702.nasl - Type: ACT_GATHER_INFO |
2010-09-08 | Name: The remote Fedora host is missing a security update. File: fedora_2010-13673.nasl - Type: ACT_GATHER_INFO |
2010-08-17 | Name: The remote Mandriva Linux host is missing one or more security updates. File: mandriva_MDVSA-2010-151.nasl - Type: ACT_GATHER_INFO |
2010-08-03 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-2081.nasl - Type: ACT_GATHER_INFO |
2010-07-15 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-2071.nasl - Type: ACT_GATHER_INFO |
2010-05-05 | Name: The remote openSUSE host is missing a security update. File: suse_11_1_libmikmod-100422.nasl - Type: ACT_GATHER_INFO |
2010-05-05 | Name: The remote openSUSE host is missing a security update. File: suse_11_2_libmikmod-100422.nasl - Type: ACT_GATHER_INFO |
2010-05-05 | Name: The remote openSUSE host is missing a security update. File: suse_11_0_libmikmod-100422.nasl - Type: ACT_GATHER_INFO |
2009-12-17 | Name: The remote Windows host contains a multimedia application that is affected by... File: winamp_557.nasl - Type: ACT_GATHER_INFO |
2009-09-24 | Name: The remote SuSE 9 host is missing a security-related patch. File: suse9_11926.nasl - Type: ACT_GATHER_INFO |
2009-05-22 | Name: The remote Windows host contains a multimedia application that is affected by... File: winamp_5552.nasl - Type: ACT_GATHER_INFO |