Lucene search

K
cveMitreCVE-2006-0476
HistoryJan 31, 2006 - 11:03 a.m.

CVE-2006-0476

2006-01-3111:03:00
mitre
web.nvd.nist.gov
29
cve-2006-0476
buffer overflow
nullsoft winamp
5.12
remote execution
arbitrary code
pls file

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.776

Percentile

98.2%

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).

Affected configurations

Nvd
Node
nullsoftwinampMatch5.12
VendorProductVersionCPE
nullsoftwinamp5.12cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.776

Percentile

98.2%