NetSight
IP …
critical9.3

CVE-2009-3995

Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers t…

Impact

Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details are obtained from third party information.

Affected products

VendorProductAffected versions
NullsoftWinamp
through 5.56
Versions 0.20a, 0.92, 1.006, 1.90, 2.0
Raphael AssenatLibmikmod
Version 3.1.12

Weakness classification

CWE-119

References