CVE-2011-4857 Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some o...
HighCVSS 10.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | <= 5.622 | No fix listed |
| nullsoft winamp | = 0.20a | No fix listed |
| nullsoft winamp | = 0.92 | No fix listed |
| nullsoft winamp | = 1.006 | No fix listed |
| nullsoft winamp | = 1.90 | No fix listed |
| nullsoft winamp | = 2.0 | No fix listed |
| nullsoft winamp | = 2.6 | No fix listed |
| nullsoft winamp | = 2.9 | No fix listed |
| nullsoft winamp | = 2.10 | No fix listed |
| nullsoft winamp | = 2.91 | No fix listed |
| nullsoft winamp | = 2.92 | No fix listed |
| nullsoft winamp | = 2.95 | No fix listed |
| nullsoft winamp | = 5.0 | No fix listed |
| nullsoft winamp | = 5.01 | No fix listed |
| nullsoft winamp | = 5.1 | No fix listed |
| nullsoft winamp | = 5.02 | No fix listed |
| nullsoft winamp | = 5.2 | No fix listed |
| nullsoft winamp | = 5.3 | No fix listed |
| nullsoft winamp | = 5.03 | No fix listed |
| nullsoft winamp | = 5.04 | No fix listed |
| nullsoft winamp | = 5.05 | No fix listed |
| nullsoft winamp | = 5.5 | No fix listed |
| nullsoft winamp | = 5.6 | No fix listed |
| nullsoft winamp | = 5.06 | No fix listed |
| nullsoft winamp | = 5.07 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | = 5.08c | No fix listed |
| nullsoft winamp | = 5.08d | No fix listed |
| nullsoft winamp | = 5.08e | No fix listed |
| nullsoft winamp | = 5.09 | No fix listed |
| nullsoft winamp | = 5.11 | No fix listed |
| nullsoft winamp | = 5.12 | No fix listed |
| nullsoft winamp | = 5.13 | No fix listed |
| nullsoft winamp | = 5.21 | No fix listed |
| nullsoft winamp | = 5.22 | No fix listed |
| nullsoft winamp | = 5.23 | No fix listed |
| nullsoft winamp | = 5.24 | No fix listed |
| nullsoft winamp | = 5.31 | No fix listed |
| nullsoft winamp | = 5.32 | No fix listed |
| nullsoft winamp | = 5.33 | No fix listed |
| nullsoft winamp | = 5.34 | No fix listed |
| nullsoft winamp | = 5.35 | No fix listed |
| nullsoft winamp | = 5.51 | No fix listed |
| nullsoft winamp | = 5.52 | No fix listed |
| nullsoft winamp | = 5.53 | No fix listed |
| nullsoft winamp | = 5.54 | No fix listed |
| nullsoft winamp | = 5.55 | No fix listed |
| nullsoft winamp | = 5.56 | No fix listed |
| nullsoft winamp | = 5.57 | No fix listed |
| nullsoft winamp | = 5.58 | No fix listed |
| nullsoft winamp | = 5.091 | No fix listed |
| nullsoft winamp | = 5.093 | No fix listed |
| nullsoft winamp | = 5.094 | No fix listed |
| nullsoft winamp | = 5.111 | No fix listed |
| nullsoft winamp | = 5.112 | No fix listed |
| nullsoft winamp | = 5.531 | No fix listed |
| nullsoft winamp | = 5.541 | No fix listed |
| nullsoft winamp | = 5.551 | No fix listed |
| nullsoft winamp | = 5.552 | No fix listed |
| nullsoft winamp | = 5.572 | No fix listed |
| nullsoft winamp | = 5.581 | No fix listed |
References
- forums.winamp.com
- 46882 third-party-advisory
- winamp-it-bo(72054) vdb-entry
- oval:org.mitre.oval:def:15351 signature vdb-entry