CVE-2011-3834 Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) th...
HighCVSS 9.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | <= 5.622 | No fix listed |
| nullsoft winamp | = 0.20a | No fix listed |
| nullsoft winamp | = 0.92 | No fix listed |
| nullsoft winamp | = 1.006 | No fix listed |
| nullsoft winamp | = 1.90 | No fix listed |
| nullsoft winamp | = 2.0 | No fix listed |
| nullsoft winamp | = 2.6 | No fix listed |
| nullsoft winamp | = 2.9 | No fix listed |
| nullsoft winamp | = 2.10 | No fix listed |
| nullsoft winamp | = 2.91 | No fix listed |
| nullsoft winamp | = 2.92 | No fix listed |
| nullsoft winamp | = 2.95 | No fix listed |
| nullsoft winamp | = 5.0 | No fix listed |
| nullsoft winamp | = 5.01 | No fix listed |
| nullsoft winamp | = 5.1 | No fix listed |
| nullsoft winamp | = 5.02 | No fix listed |
| nullsoft winamp | = 5.2 | No fix listed |
| nullsoft winamp | = 5.3 | No fix listed |
| nullsoft winamp | = 5.03 | No fix listed |
| nullsoft winamp | = 5.04 | No fix listed |
| nullsoft winamp | = 5.05 | No fix listed |
| nullsoft winamp | = 5.5 | No fix listed |
| nullsoft winamp | = 5.6 | No fix listed |
| nullsoft winamp | = 5.06 | No fix listed |
| nullsoft winamp | = 5.07 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | = 5.08c | No fix listed |
| nullsoft winamp | = 5.08d | No fix listed |
| nullsoft winamp | = 5.08e | No fix listed |
| nullsoft winamp | = 5.09 | No fix listed |
| nullsoft winamp | = 5.11 | No fix listed |
| nullsoft winamp | = 5.12 | No fix listed |
| nullsoft winamp | = 5.13 | No fix listed |
| nullsoft winamp | = 5.21 | No fix listed |
| nullsoft winamp | = 5.22 | No fix listed |
| nullsoft winamp | = 5.23 | No fix listed |
| nullsoft winamp | = 5.24 | No fix listed |
| nullsoft winamp | = 5.31 | No fix listed |
| nullsoft winamp | = 5.32 | No fix listed |
| nullsoft winamp | = 5.33 | No fix listed |
| nullsoft winamp | = 5.34 | No fix listed |
| nullsoft winamp | = 5.35 | No fix listed |
| nullsoft winamp | = 5.51 | No fix listed |
| nullsoft winamp | = 5.52 | No fix listed |
| nullsoft winamp | = 5.53 | No fix listed |
| nullsoft winamp | = 5.54 | No fix listed |
| nullsoft winamp | = 5.55 | No fix listed |
| nullsoft winamp | = 5.56 | No fix listed |
| nullsoft winamp | = 5.57 | No fix listed |
| nullsoft winamp | = 5.58 | No fix listed |
| nullsoft winamp | = 5.091 | No fix listed |
| nullsoft winamp | = 5.093 | No fix listed |
| nullsoft winamp | = 5.094 | No fix listed |
| nullsoft winamp | = 5.111 | No fix listed |
| nullsoft winamp | = 5.112 | No fix listed |
| nullsoft winamp | = 5.531 | No fix listed |
| nullsoft winamp | = 5.541 | No fix listed |
| nullsoft winamp | = 5.551 | No fix listed |
| nullsoft winamp | = 5.552 | No fix listed |
| nullsoft winamp | = 5.572 | No fix listed |
| nullsoft winamp | = 5.581 | No fix listed |
References
- forums.winamp.com
- 46882 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- oval:org.mitre.oval:def:14981 signature vdb-entry