CVE-2007-2498

2007-05-0400:19:00

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.118

Percentile

95.4%

JSON

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

nullsoftwinampMatch5.2

nullsoftwinampMatch5.3

nullsoftwinampMatch5.21

nullsoftwinampMatch5.22

nullsoftwinampMatch5.23

nullsoftwinampMatch5.24

nullsoftwinampMatch5.31

nullsoftwinampMatch5.32

nullsoftwinampMatch5.33

nullsoftwinampMatch5.34

VendorProductVersionCPE
nullsoftwinamp5.2cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*
nullsoftwinamp5.3cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*
nullsoftwinamp5.21cpe:2.3:a:nullsoft:winamp:5.21:*:*:*:*:*:*:*
nullsoftwinamp5.22cpe:2.3:a:nullsoft:winamp:5.22:*:*:*:*:*:*:*
nullsoftwinamp5.23cpe:2.3:a:nullsoft:winamp:5.23:*:*:*:*:*:*:*
nullsoftwinamp5.24cpe:2.3:a:nullsoft:winamp:5.24:*:*:*:*:*:*:*
nullsoftwinamp5.31cpe:2.3:a:nullsoft:winamp:5.31:*:*:*:*:*:*:*
nullsoftwinamp5.32cpe:2.3:a:nullsoft:winamp:5.32:*:*:*:*:*:*:*
nullsoftwinamp5.33cpe:2.3:a:nullsoft:winamp:5.33:*:*:*:*:*:*:*
nullsoftwinamp5.34cpe:2.3:a:nullsoft:winamp:5.34:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nullsoft	winamp	5.2	cpe:2.3:a:nullsoft:winamp:5.2:::::::*
nullsoft	winamp	5.3	cpe:2.3:a:nullsoft:winamp:5.3:::::::*
nullsoft	winamp	5.21	cpe:2.3:a:nullsoft:winamp:5.21:::::::*
nullsoft	winamp	5.22	cpe:2.3:a:nullsoft:winamp:5.22:::::::*
nullsoft	winamp	5.23	cpe:2.3:a:nullsoft:winamp:5.23:::::::*
nullsoft	winamp	5.24	cpe:2.3:a:nullsoft:winamp:5.24:::::::*
nullsoft	winamp	5.31	cpe:2.3:a:nullsoft:winamp:5.31:::::::*
nullsoft	winamp	5.32	cpe:2.3:a:nullsoft:winamp:5.32:::::::*
nullsoft	winamp	5.33	cpe:2.3:a:nullsoft:winamp:5.33:::::::*
nullsoft	winamp	5.34	cpe:2.3:a:nullsoft:winamp:5.34:::::::*