Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1896
cve-2004-1896
heap-based buffer overflow
nullsoft winamp
remote code execution
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.24 Low
EPSS
Percentile
96.6%
Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.
Affected configurations
Node
nullsoftwinampMatch2.91
ORnullsoftwinampMatch3.0
ORnullsoftwinampMatch3.1
ORnullsoftwinampMatch5.0.1
ORnullsoftwinampMatch5.0.2
Related
nvd
nvd
CVE-2004-1896
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-1896
2005-05-10 04:00:00
checkpoint_advisories
checkpoint_advisories
Winamp XM File Heap Buffer Overflow (CVE-2004-1896)
2009-10-15 00:00:00
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.24 Low
EPSS
Percentile
96.6%
Related for CVE-2004-1896