Lucene search

MitreCVE-2005-2310

HistoryJul 19, 2005 - 4:00 a.m.

CVE-2005-2310

2005-07-1904:00:00

CWE-119

mitre

web.nvd.nist.gov

winamp

buffer overflow

remote code execution

cve-2005-2310

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.94

Percentile

99.2%

JSON

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.

Affected configurations

Nvd

Node

nullsoftwinampRange≤5.093

nullsoftwinampMatch5.03a

nullsoftwinampMatch5.09

nullsoftwinampMatch5.091

VendorProductVersionCPE
nullsoftwinamp*cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*
nullsoftwinamp5.03acpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*
nullsoftwinamp5.09cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*
nullsoftwinamp5.091cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nullsoft	winamp	*	cpe:2.3:a:nullsoft:winamp::::::::
nullsoft	winamp	5.03a	cpe:2.3:a:nullsoft:winamp:5.03a:::::::*
nullsoft	winamp	5.09	cpe:2.3:a:nullsoft:winamp:5.09:::::::*
nullsoft	winamp	5.091	cpe:2.3:a:nullsoft:winamp:5.091:::::::*

References

secunia.com/advisories/16077

security.lss.hr/index.php?page=details&ID=LSS-2005-07-14

securitytracker.com/id?1014483

www.osvdb.org/17897

www.securityfocus.com/bid/14276

www.vupen.com/english/advisories/2005/1106

www.winamp.com/player/version_history.php

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.94

Percentile

99.2%

JSON

Related for CVE-2005-2310