VulnerabilityModified

CVE-2004-1119

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.

HIGH 10.0EPSS 17.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 17.3%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 17.26% probability · 97th percentile
CISA KEV: Not listed
Affected: nullsoft/winamp
Source: cve@mitre.org

References

http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html
http://marc.info/?l=bugtraq&m=110123330404482&w=2
http://marc.info/?l=bugtraq&m=110146036300803&w=2
http://marc.info/?l=ntbugtraq&m=110126352412395&w=2
http://marc.info/?l=ntbugtraq&m=110135574326217&w=2
http://secunia.com/advisories/13269/
http://www.kb.cert.org/vuls/id/986504US Government Resource
http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf
http://www.securityfocus.com/bid/11730Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18197
http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html
http://marc.info/?l=bugtraq&m=110123330404482&w=2
http://marc.info/?l=bugtraq&m=110146036300803&w=2
http://marc.info/?l=ntbugtraq&m=110126352412395&w=2
http://marc.info/?l=ntbugtraq&m=110135574326217&w=2
http://secunia.com/advisories/13269/
http://www.kb.cert.org/vuls/id/986504US Government Resource
http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf
http://www.securityfocus.com/bid/11730Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18197

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.