Lucene search

K
kasperskyKaspersky LabKLA10020
HistoryApr 16, 2014 - 12:00 a.m.

KLA10020 DoS vulnerability in Winamp

2014-04-1600:00:00
Kaspersky Lab
threats.kaspersky.com
31

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.191 Low

EPSS

Percentile

96.2%

Detect date:

04/16/2014

Severity:

Critical

Description:

A stack-based buffer overflow was found in Winamp. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to Skin packages via a specially designed package.

Affected products:

Winamp versions 5.63 and earlier

Solution:

Update to latest version
Winamp

Original advisories:

NVD

Impacts:

ACE

Related products:

Winamp

CVE-IDS:

CVE-2013-46947.5Critical

Exploitation:

Public exploits exist for this vulnerability.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.191 Low

EPSS

Percentile

96.2%