Lucene search

K
cve[email protected]CVE-2009-3996
HistoryDec 18, 2009 - 7:30 p.m.

CVE-2009-3996

2009-12-1819:30:00
CWE-119
web.nvd.nist.gov
35
cve-2009-3996
buffer overflow
winamp
libmikmod
ultratracker file
nvd

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.208 Low

EPSS

Percentile

96.4%

Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.208 Low

EPSS

Percentile

96.4%