CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
96.6%
Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.
Vendor | Product | Version | CPE |
---|---|---|---|
nullsoft | winamp | 2.91 | cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:* |
nullsoft | winamp | 3.0 | cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:* |
nullsoft | winamp | 3.1 | cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:* |
nullsoft | winamp | 5.0.1 | cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:* |
nullsoft | winamp | 5.0.2 | cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:* |