Lucene search

MitreCVE-2003-0765

HistorySep 17, 2003 - 4:00 a.m.

CVE-2003-0765

2003-09-1704:00:00

mitre

web.nvd.nist.gov

in_midi.dll

winamp

remote code execution

midi file

cve-2003-0765

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.012

Percentile

85.2%

JSON

The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large “Track data size” value.

Affected configurations

Nvd

Node

nullsoftwinampMatch2.81

nullsoftwinampMatch2.91

nullsoftwinampMatch3.0

nullsoftwinampMatch3.1

VendorProductVersionCPE
nullsoftwinamp2.81cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*
nullsoftwinamp2.91cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*
nullsoftwinamp3.0cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*
nullsoftwinamp3.1cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nullsoft	winamp	2.81	cpe:2.3:a:nullsoft:winamp:2.81:::::::*
nullsoft	winamp	2.91	cpe:2.3:a:nullsoft:winamp:2.91:::::::*
nullsoft	winamp	3.0	cpe:2.3:a:nullsoft:winamp:3.0:::::::*
nullsoft	winamp	3.1	cpe:2.3:a:nullsoft:winamp:3.1:::::::*

References

marc.info/?l=bugtraq&m=106305643432112&w=2

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.012

Percentile

85.2%

JSON

Related for CVE-2003-0765