CVE-2007-2498

Winamp <5.34 - RCE

Title source: llm

Description

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Marsu · clocalwindows

https://www.exploit-db.com/exploits/3823

View Code ZIP pw:eip

References (6)

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1017993

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34030

[Vendor Advisory] http://secunia.com/advisories/25089

[Exploit] http://www.securityfocus.com/bid/23723

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1594

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3823

Scores

EPSS 0.0922

EPSS Percentile 92.7%

Details

Status published

Products (10)

nullsoft/winamp 5.2

nullsoft/winamp 5.3

nullsoft/winamp 5.21

nullsoft/winamp 5.22

nullsoft/winamp 5.23

nullsoft/winamp 5.24

nullsoft/winamp 5.31

nullsoft/winamp 5.32

nullsoft/winamp 5.33

nullsoft/winamp 5.34

Published May 04, 2007

Tracked Since Feb 18, 2026