critical9.3Public exploit code
CVE-2005-2310
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow2005-07-15 · remote · windows · Verified
Impact
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nullsoft | Winamp | through 5.093 Versions 5.03a, 5.09, 5.091 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/16077
- http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14
- http://securitytracker.com/id?1014483
- http://www.osvdb.org/17897
- http://www.securityfocus.com/bid/14276
- http://www.vupen.com/english/advisories/2005/1106
- http://www.winamp.com/player/version_history.php
- http://secunia.com/advisories/16077
- http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14
- http://securitytracker.com/id?1014483
- http://www.osvdb.org/17897
- http://www.securityfocus.com/bid/14276
- http://www.vupen.com/english/advisories/2005/1106
- http://www.winamp.com/player/version_history.php