CVE-2005-2310 Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITL...
HighCVSS 9.3
EPSS 13.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | <= 5.093 | No fix listed |
| nullsoft winamp | = 5.03a | No fix listed |
| nullsoft winamp | = 5.09 | No fix listed |
| nullsoft winamp | = 5.091 | No fix listed |
References
- 16077 third-party-advisory vendor-advisory
- security.lss.hr exploit vendor-advisory
- 1014483 exploit vdb-entry
- 17897 vdb-entry
- 14276 vdb-entry
- ADV-2005-1106 vdb-entry
- www.winamp.com