CVE-2014-3442 Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
MediumCVSS 4.3
EPSS 2.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | <= 5.666 | No fix listed |
| nullsoft winamp | = 5.0 | No fix listed |
| nullsoft winamp | = 5.01 | No fix listed |
| nullsoft winamp | = 5.02 | No fix listed |
| nullsoft winamp | = 5.2 | No fix listed |
| nullsoft winamp | = 5.3 | No fix listed |
| nullsoft winamp | = 5.03 | No fix listed |
| nullsoft winamp | = 5.04 | No fix listed |
| nullsoft winamp | = 5.05 | No fix listed |
| nullsoft winamp | = 5.5 | No fix listed |
| nullsoft winamp | = 5.06 | No fix listed |
| nullsoft winamp | = 5.07 | No fix listed |
| nullsoft winamp | = 5.08c | No fix listed |
| nullsoft winamp | = 5.08d | No fix listed |
| nullsoft winamp | = 5.08e | No fix listed |
| nullsoft winamp | = 5.09 | No fix listed |
| nullsoft winamp | = 5.11 | No fix listed |
| nullsoft winamp | = 5.12 | No fix listed |
| nullsoft winamp | = 5.13 | No fix listed |
| nullsoft winamp | = 5.21 | No fix listed |
| nullsoft winamp | = 5.22 | No fix listed |
| nullsoft winamp | = 5.23 | No fix listed |
| nullsoft winamp | = 5.24 | No fix listed |
| nullsoft winamp | = 5.31 | No fix listed |
| nullsoft winamp | = 5.32 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nullsoft winamp | = 5.33 | No fix listed |
| nullsoft winamp | = 5.34 | No fix listed |
| nullsoft winamp | = 5.35 | No fix listed |
| nullsoft winamp | = 5.36 | No fix listed |
| nullsoft winamp | = 5.51 | No fix listed |
| nullsoft winamp | = 5.51-beta | No fix listed |
| nullsoft winamp | = 5.52 | No fix listed |
| nullsoft winamp | = 5.53 | No fix listed |
| nullsoft winamp | = 5.54 | No fix listed |
| nullsoft winamp | = 5.54-beta | No fix listed |
| nullsoft winamp | = 5.55 | No fix listed |
| nullsoft winamp | = 5.55-beta | No fix listed |
| nullsoft winamp | = 5.56 | No fix listed |
| nullsoft winamp | = 5.57 | No fix listed |
| nullsoft winamp | = 5.58 | No fix listed |
| nullsoft winamp | = 5.59-beta | No fix listed |
| nullsoft winamp | = 5.61 | No fix listed |
| nullsoft winamp | = 5.63 | No fix listed |
| nullsoft winamp | = 5.091 | No fix listed |
| nullsoft winamp | = 5.093 | No fix listed |
| nullsoft winamp | = 5.094 | No fix listed |
| nullsoft winamp | = 5.111 | No fix listed |
| nullsoft winamp | = 5.112 | No fix listed |
| nullsoft winamp | = 5.531 | No fix listed |
| nullsoft winamp | = 5.541 | No fix listed |
| nullsoft winamp | = 5.551 | No fix listed |
| nullsoft winamp | = 5.552 | No fix listed |
| nullsoft winamp | = 5.572 | No fix listed |
| nullsoft winamp | = 5.581 | No fix listed |
| nullsoft winamp | = 5.623 | No fix listed |
References
- packetstormsecurity.com exploit
- 67429 exploit vdb-entry
- winamp-cve20143442-code-exec(93173) vdb-entry