CVE-2010-1523
Winamp < 5.59 Beta build 3033 - Remote Code Execution via Crafted VP6 Video File
Title source: llmDescription
Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2) video stream.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/44466
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12056
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/514484/100/0/threaded
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2010-95/
Various Sources x_refsource_confirm
http://forums.winamp.com/showthread.php?t=322995
Scores
EPSS
0.0542
EPSS Percentile
91.8%
Details
CWE
CWE-119
Status
published
Products (42)
nullsoft/winamp
0.20a
nullsoft/winamp
0.92
nullsoft/winamp
1.006
nullsoft/winamp
1.90
nullsoft/winamp
2.0
nullsoft/winamp
2.4
nullsoft/winamp
2.5e
nullsoft/winamp
2.6
nullsoft/winamp
2.6x
nullsoft/winamp
2.7x
... and 32 more
Published
Nov 06, 2010
Tracked Since
Feb 18, 2026