Lucene search

K
nvd[email protected]NVD:CVE-2004-1896
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1896

2004-12-3105:00:00
web.nvd.nist.gov
2

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.24

Percentile

96.6%

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Affected configurations

Nvd
Node
nullsoftwinampMatch2.91
OR
nullsoftwinampMatch3.0
OR
nullsoftwinampMatch3.1
OR
nullsoftwinampMatch5.0.1
OR
nullsoftwinampMatch5.0.2
VendorProductVersionCPE
nullsoftwinamp2.91cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*
nullsoftwinamp3.0cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*
nullsoftwinamp3.1cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*
nullsoftwinamp5.0.1cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*
nullsoftwinamp5.0.2cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.24

Percentile

96.6%

Related for NVD:CVE-2004-1896