CVE-2003-1274

Winamp 3.0 is affected by a denial-of-service vulnerability triggered when processing a specially crafted .b4s playlist file. The Playstring parameter can be supplied with a file: argument containing MS-DOS device names (e.g., aux), causing the player to crash. Public references in NVD/CVE record...

CVE-2003-1273

Winamp 3.0 is affected: processing a .b4s playlist file with a name containing non-English characters (e.g., Cyrillic) can crash the application, causing a denial of service. The provided documents do not specify a patch or exact remediation; no exploitation details are given. In short, vulnerabl...

CVE-2003-1273

Winamp 3.0 allows remote attackers to cause a denial of service crash via a .b4s file with a playlist name that contains some non-English characters, e.g. Cyrillic characters...

CVE-2003-1272

CVE-2003-1272 affects Winamp 3.0. The vulnerability is described as multiple buffer overflows in Winamp’s b4s file handling, specifically when a long playlist name or a long path is passed to the Playstring parameter. This can allow a remote attacker to crash the application and potentially execu...

CVE-2003-1274

Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...

CVE-2003-1272

Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .b4s file containing 1 a long playlist name or 2 a long path in a file: argument to the Playstring parameter...

CVE-2004-2384

Affected software: NullSoft Winamp versions around 5.02 and older (Winamp

CVE-2004-2384

NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...

CVE-2005-2310

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...

CVE-2005-2310

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...

CVE-2005-2310

CVE-2005-2310 : Winamp 5.03a, 5.09, 5.091 and other builds before 5.094 are affected by a buffer overflow in ID3v2 tag handling. An MP3 file with a crafted long ID3v2 tag (e.g., ARTIST or TITLE) can be parsed by Winamp, enabling a remote attacker to execute arbitrary code with the caller’s privil...

Nullsoft Winamp < 5.093 Malformed ID3v2 Tag Overflow

Binary data 3069.prm...

Winamp < 5.093 Malformed ID3v2 Tag Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The installed version of Winamp suffers from a buffer overflow vulnerability when processing overly-long ID3v2 tags in an MP3 file. An attacker may be able to exploit this flaw to execute arbitrary code on the remote host...

NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow

NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow source: https://www.securityfocus.com/bid/14276/info Winamp is susceptible to a buffer overflow vulnerability in its ID3v2 functionality. This issue is due to a failure of the application to properly bounds check input data prior to copyin...

WinAmp MP3 files ID3v2 tags buffer overflow

Buffer overflow on oversized ID3v2 tag fields...

[Full-disclosure] LSS Security Advisory: Winamp remote buffer overflow vulnerability

LSS Security Advisory LSS-2005-07-14 http://security.lss.hr Title: Winamp remote buffer overflow vulnerability Advisory ID: LSS-2005-07-14 Date: 2005-07-14 Advisory URL: http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14 Impact: Remote and local code execution Risk Level: High...

NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow

source: https://www.securityfocus.com/bid/14276/info Winamp is susceptible to a buffer overflow vulnerability in its ID3v2 functionality. This issue is due to a failure of the application to properly bounds check input data prior to copying it into a fixed size memory buffer. This issue will...

CVE-2004-1896

Heap-based buffer overflow in inmod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 .xm mod media file...

CVE-2004-1896

This CVE affects Nullsoft Winamp versions 2.91 through 5.02, with a heap-based overflow in the in_mod.dll parser for Fasttracker 2 (.xm) mods. The vulnerability allows remote code execution via a malformed XM file, caused by a bound-check/heap-overflow condition in the XM/.MOD parsing path. The r...

WinAmp playlist handling may allow a remote buffer overflow and arbitrary code execution

Overview WinAmp contains a flaw which may allow a remote system compromise if a maliciously crafted playlist is loaded. Description Nullsoft's WinAmp is a multimedia system for Microsoft Windows. WinAmp allows users to create and use "playlists" to play their multimedia files in a customized...