critical10.0
CVE-2011-4857
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in a…
Impact
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nullsoft | Winamp | through 5.622 Versions 0.20a, 0.92, 1.006, 1.90, 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://forums.winamp.com/showthread.php?t=332010
- http://secunia.com/advisories/46882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72054
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351
- http://forums.winamp.com/showthread.php?t=332010
- http://secunia.com/advisories/46882
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72054
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351