CVE-2011-4857

Winamp < 5.623 - Remote Code Execution via Crafted IT File Song Message Data

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.

References (4)

Core 4
Core References
Various Sources x_refsource_confirm
http://forums.winamp.com/showthread.php?t=332010
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72054
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46882

Scores

EPSS 0.0492
EPSS Percentile 91.1%

Details

CWE
CWE-119
Status published
Products (50)
nullsoft/winamp 0.20a
nullsoft/winamp 0.92
nullsoft/winamp 1.006
nullsoft/winamp 1.90
nullsoft/winamp 2.0
nullsoft/winamp 2.6
nullsoft/winamp 2.9
nullsoft/winamp 2.10
nullsoft/winamp 2.91
nullsoft/winamp 2.92
... and 40 more
Published Dec 16, 2011
Tracked Since Feb 18, 2026