Lucene search

K
cveMitreCVE-2006-0720
HistoryFeb 23, 2006 - 9:02 p.m.

CVE-2006-0720

2006-02-2321:02:00
mitre
web.nvd.nist.gov
25
cve-2006-0720
buffer overflow
nullsoft winamp
denial of service
arbitrary code
vulnerability

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.009

Percentile

82.6%

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.

Affected configurations

Nvd
Node
nullsoftwinampMatch5.12
OR
nullsoftwinampMatch5.13
VendorProductVersionCPE
nullsoftwinamp5.12cpe:2.3:a:nullsoft:winamp:5.12:*:*:*:*:*:*:*
nullsoftwinamp5.13cpe:2.3:a:nullsoft:winamp:5.13:*:*:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.009

Percentile

82.6%