CVE-2004-1150

Winamp 5.0-5.08c - Stack-Based Buffer Overflow via CDA URL Device Name or Track Number

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1150. PoCs published by Yu Yang.

AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in Nullsoft Winamp's IN_CDDA.dll library by crafting a malicious playlist file. The overflow occurs due to improper validation of user-supplied strings, allowing remote code execution when the playlist is processed.

Description

Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Yu Yang · textdoswindows
https://www.exploit-db.com/exploits/25061

This exploit leverages a buffer overflow vulnerability in Nullsoft Winamp's IN_CDDA.dll library by crafting a malicious playlist file. The overflow occurs due to improper validation of user-supplied strings, allowing remote code execution when the playlist is processed.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Nullsoft Winamp (versions with vulnerable IN_CDDA.dll)
No auth needed
Prerequisites: Victim must open the malicious playlist file in Winamp
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18840
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/12381
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/13781
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110684140108614&w=2
Various Sources x_refsource_confirm
http://www.winamp.com/player/version_history.php

Scores

EPSS 0.0871
EPSS Percentile 94.6%

Details

Status published
Products (9)
nullsoft/winamp 5.0
nullsoft/winamp 5.01
nullsoft/winamp 5.02
nullsoft/winamp 5.03
nullsoft/winamp 5.04
nullsoft/winamp 5.05
nullsoft/winamp 5.06
nullsoft/winamp 5.07
nullsoft/winamp 5.08c
Published Dec 31, 2004
Tracked Since Feb 18, 2026