critical9.3Public exploit code
CVE-2007-2498
libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Winamp 5.34 - '.mp4' Code Execution2007-04-30 · local · windows · Verified
Impact
libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nullsoft | Winamp | Versions 5.2, 5.3, 5.21, 5.22, 5.23, 5.24 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/25089
- http://securitytracker.com/id?1017993
- http://www.securityfocus.com/bid/23723
- http://www.vupen.com/english/advisories/2007/1594
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34030
- https://www.exploit-db.com/exploits/3823
- http://secunia.com/advisories/25089
- http://securitytracker.com/id?1017993
- http://www.securityfocus.com/bid/23723
- http://www.vupen.com/english/advisories/2007/1594
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34030
- https://www.exploit-db.com/exploits/3823