CVE-2003-1272 Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .b4s file containing (1) a long playlist name or (2) a lon...
HighCVSS 9.3
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .b4s file containing (1) a long playlist name or (2) a long path in a file: argument to the Playstring parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | = 3.0 | No fix listed |
References
- 20030104 WinAmp v.3.0: buffer overflow mailing-list vendor-advisory
- winamp-b4s-playlistname-bo(10980) vdb-entry
- 6515 vdb-entry
- 6516 vdb-entry
- winamp-b4s-path-bo(10981) vdb-entry