CVE-2004-1119 Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.
HighCVSS 10.0
EPSS 17.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | = 5.01 | No fix listed |
| nullsoft winamp | = 5.02 | No fix listed |
| nullsoft winamp | = 5.03 | No fix listed |
| nullsoft winamp | = 5.04 | No fix listed |
| nullsoft winamp | = 5.05 | No fix listed |
| nullsoft winamp | = 5.06 | No fix listed |
References
- 20041126 Re: Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched mailing-list
- 20041123 Winamp - Buffer Overflow In IN_CDDA.dll mailing-list
- 20041124 Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] mailing-list
- 20041123 Winamp - Buffer Overflow In IN_CDDA.dll mailing-list
- 20041124 Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched] mailing-list
- 13269 third-party-advisory
- VU#986504 third-party-advisory us-government-resource
- www.security-assessment.com
- 11730 exploit patch vdb-entry vendor-advisory
- winamp-incddadll-bo(18197) vdb-entry