Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.
2009-01-23T19:00:05.297
2025-04-09T00:30:58.490
Deferred
CVSSv2: 10.0 (HIGH)
AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | nullsoft | winamp | ≤ 5.541 | Yes |
| Application | nullsoft | winamp | 2.0 | Yes |
| Application | nullsoft | winamp | 2.4 | Yes |
| Application | nullsoft | winamp | 2.5e | Yes |
| Application | nullsoft | winamp | 2.6x | Yes |
| Application | nullsoft | winamp | 2.7x | Yes |
| Application | nullsoft | winamp | 2.10 | Yes |
| Application | nullsoft | winamp | 2.24 | Yes |
| Application | nullsoft | winamp | 2.50 | Yes |
| Application | nullsoft | winamp | 2.60 | Yes |
| Application | nullsoft | winamp | 2.60 | Yes |
| Application | nullsoft | winamp | 2.60 | Yes |
| Application | nullsoft | winamp | 2.61 | Yes |
| Application | nullsoft | winamp | 2.61 | Yes |
| Application | nullsoft | winamp | 2.62 | Yes |
| Application | nullsoft | winamp | 2.62 | Yes |
| Application | nullsoft | winamp | 2.64 | Yes |
| Application | nullsoft | winamp | 2.64 | Yes |
| Application | nullsoft | winamp | 2.65 | Yes |
| Application | nullsoft | winamp | 2.70 | Yes |
| Application | nullsoft | winamp | 2.70 | Yes |
| Application | nullsoft | winamp | 2.71 | Yes |
| Application | nullsoft | winamp | 2.72 | Yes |
| Application | nullsoft | winamp | 2.73 | Yes |
| Application | nullsoft | winamp | 2.73 | Yes |
| Application | nullsoft | winamp | 2.74 | Yes |
| Application | nullsoft | winamp | 2.75 | Yes |
| Application | nullsoft | winamp | 2.76 | Yes |
| Application | nullsoft | winamp | 2.77 | Yes |
| Application | nullsoft | winamp | 2.78 | Yes |
| Application | nullsoft | winamp | 2.79 | Yes |
| Application | nullsoft | winamp | 2.80 | Yes |
| Application | nullsoft | winamp | 2.81 | Yes |
| Application | nullsoft | winamp | 2.90 | Yes |
| Application | nullsoft | winamp | 2.91 | Yes |
| Application | nullsoft | winamp | 2.95 | Yes |
| Application | nullsoft | winamp | 3.0 | Yes |
| Application | nullsoft | winamp | 3.1 | Yes |
| Application | nullsoft | winamp | 5.0 | Yes |
| Application | nullsoft | winamp | 5.0.1 | Yes |
| Application | nullsoft | winamp | 5.0.2 | Yes |
| Application | nullsoft | winamp | 5.01 | Yes |
| Application | nullsoft | winamp | 5.1 | Yes |
| Application | nullsoft | winamp | 5.02 | Yes |
| Application | nullsoft | winamp | 5.2 | Yes |
| Application | nullsoft | winamp | 5.3 | Yes |
| Application | nullsoft | winamp | 5.03 | Yes |
| Application | nullsoft | winamp | 5.03a | Yes |
| Application | nullsoft | winamp | 5.04 | Yes |
| Application | nullsoft | winamp | 5.05 | Yes |
| Application | nullsoft | winamp | 5.5 | Yes |
| Application | nullsoft | winamp | 5.06 | Yes |
| Application | nullsoft | winamp | 5.07 | Yes |
| Application | nullsoft | winamp | 5.08 | Yes |
| Application | nullsoft | winamp | 5.08 | Yes |
| Application | nullsoft | winamp | 5.08 | Yes |
| Application | nullsoft | winamp | 5.08 | Yes |
| Application | nullsoft | winamp | 5.08c | Yes |
| Application | nullsoft | winamp | 5.08d | Yes |
| Application | nullsoft | winamp | 5.08e | Yes |
| Application | nullsoft | winamp | 5.09 | Yes |
| Application | nullsoft | winamp | 5.11 | Yes |
| Application | nullsoft | winamp | 5.12 | Yes |
| Application | nullsoft | winamp | 5.13 | Yes |
| Application | nullsoft | winamp | 5.21 | Yes |
| Application | nullsoft | winamp | 5.22 | Yes |
| Application | nullsoft | winamp | 5.23 | Yes |
| Application | nullsoft | winamp | 5.24 | Yes |
| Application | nullsoft | winamp | 5.31 | Yes |
| Application | nullsoft | winamp | 5.32 | Yes |
| Application | nullsoft | winamp | 5.33 | Yes |
| Application | nullsoft | winamp | 5.34 | Yes |
| Application | nullsoft | winamp | 5.35 | Yes |
| Application | nullsoft | winamp | 5.36 | Yes |
| Application | nullsoft | winamp | 5.51 | Yes |
| Application | nullsoft | winamp | 5.52 | Yes |
| Application | nullsoft | winamp | 5.53 | Yes |
| Application | nullsoft | winamp | 5.54 | Yes |
| Application | nullsoft | winamp | 5.091 | Yes |
| Application | nullsoft | winamp | 5.093 | Yes |
| Application | nullsoft | winamp | 5.094 | Yes |
| Application | nullsoft | winamp | 5.111 | Yes |
| Application | nullsoft | winamp | 5.112 | Yes |