Lucene search
HistoryNov 16, 2005 - 7:37 a.m.
CVE-2003-1272
winamp
buffer overflow
remote attack
denial of service
arbitrary code execution
cve-2003-1272
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.03 Low
EPSS
Percentile
91.0%
Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .b4s file containing (1) a long playlist name or (2) a long path in a file: argument to the Playstring parameter.
Affected configurations
Node
nullsoftwinampMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| nullsoft:winamp | nullsoft winamp | eq | 3.0 |
Related
cvelist
cvelist
CVE-2003-1272
2005-11-16 07:37:00
nvd
nvd
CVE-2003-1272
2003-12-31 05:00:00
nessus
nessus
Winamp < 3.0b Multiple File Handling DoS
2003-04-14 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.03 Low
EPSS
Percentile
91.0%
Related for CVE-2003-1272