Lucene search

K
nvd[email protected]NVD:CVE-2006-0720
HistoryFeb 23, 2006 - 9:02 p.m.

CVE-2006-0720

2006-02-2321:02:00
web.nvd.nist.gov
3

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.009

Percentile

82.6%

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.

Affected configurations

Nvd
Node
nullsoftwinampMatch5.12
OR
nullsoftwinampMatch5.13
VendorProductVersionCPE
nullsoftwinamp5.12cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*
nullsoftwinamp5.13cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.009

Percentile

82.6%