Lucene search
HistoryJul 22, 2012 - 5:55 p.m.
CVE-2012-4045
cve-2012-4045
winamp
buffer overflow
remote code execution
avi file
nvd
8 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.05 Low
EPSS
Percentile
92.8%
Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nullsoft:winamp | nullsoft winamp | le | 5.63 |
Related
prion
prion
Heap overflow
2012-07-22 17:55:00
openvas
openvas
Winamp 'AVI' File Multiple Heap-based Buffer Overflow Vulnerabilities
2012-08-02 00:00:00
Winamp 'AVI' File Multiple Heap-based Buffer Overflow Vulnerabilities
2012-08-02 00:00:00
nessus
nessus
Winamp < 5.63 Multiple Vulnerabilities
2012-06-28 00:00:00
8 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.05 Low
EPSS
Percentile
92.8%
Related for CVE-2012-4045