CVE-2006-3228

WinAmp <5.23 - RCE

Title source: llm

Description

Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by BassReFLeX · c++doswindows

https://www.exploit-db.com/exploits/1935

View Code ZIP pw:eip

References (6)

[Patch] http://forums.winamp.com/showthread.php?threadid=248100

[Vendor Advisory] http://secunia.com/advisories/20722

[Third Party Advisory] http://www.attrition.org/pipermail/vim/2006-June/000892.html

[Third Party Advisory] http://www.attrition.org/pipermail/vim/2006-June/000893.html

[Various Sources] http://www.winamp.com/about/article.php?aid=10694

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/1935

Scores

EPSS 0.0910

EPSS Percentile 92.7%

Details

Status published

Products (30)

nullsoft/winamp 2.90

nullsoft/winamp 2.91

nullsoft/winamp 2.95

nullsoft/winamp 3.0

nullsoft/winamp 3.1

nullsoft/winamp 5.0

nullsoft/winamp 5.0.1

nullsoft/winamp 5.0.2

nullsoft/winamp 5.01

nullsoft/winamp 5.1

... and 20 more

Published Jun 26, 2006

Tracked Since Feb 18, 2026