Lucene search
HistoryJan 22, 2008 - 8:00 p.m.
CVE-2008-0065
cve-2008-0065
winamp
stack-based buffer overflow
remote code execution
in_mp3.dll
ultravox streaming metadata
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.75 High
EPSS
Percentile
98.2%
Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.
Affected configurations
Node
winampnullsoft_winampMatch5.5
ORwinampnullsoft_winampMatch5.21
ORwinampnullsoft_winampMatch5.51
Related
saint
saint
Winamp Ultravox streaming metadata artist tag buffer overflow
2008-02-04 00:00:00
Winamp Ultravox streaming metadata artist tag buffer overflow
2008-02-04 00:00:00
Winamp Ultravox streaming metadata artist tag buffer overflow
2008-02-04 00:00:00
prion
prion
Stack overflow
2008-01-22 20:00:00
cvelist
cvelist
CVE-2008-0065
2008-01-22 19:00:00
nvd
nvd
CVE-2008-0065
2008-01-22 20:00:00
nessus
nessus
Winamp < 5.52 Ultravox Streaming Metadata in_mp3.dll Multiple Tag Overflow
2008-01-18 00:00:00
seebug
seebug
Winamp Ultravoxๆตๅ
ๆฐๆฎๅคไธชๆ ๆบขๅบๆผๆด
2008-01-21 00:00:00
checkpoint_advisories
checkpoint_advisories
packetstorm
packetstorm
Winamp Ultravox Streaming Metadata (in_mp3.dll) Buffer Overflow
2009-11-26 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.75 High
EPSS
Percentile
98.2%
Related for CVE-2008-0065