Vulnerabilities > CVE-2004-1896 - Unspecified vulnerability in Nullsoft Winamp

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

nullsoft

NVD

Published: 2004-12-31

Updated: 2024-11-20

Summary

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Vulnerable Configurations

Part	Description	Count
Application	Nullsoft Nullsoft Winamp 5.0.2 Nullsoft Winamp 3.1 Nullsoft Winamp 2.91 Nullsoft Winamp 5.0.1 Nullsoft Winamp 3.0	5

References

http://marc.info/?l=bugtraq&m=108118289208693&w=2
http://marc.info/?l=bugtraq&m=108118289208693&w=2
http://secunia.com/advisories/11285
http://secunia.com/advisories/11285
http://securitytracker.com/id?1009660
http://securitytracker.com/id?1009660
http://www.nextgenss.com/advisories/winampheap.txt
http://www.nextgenss.com/advisories/winampheap.txt
http://www.osvdb.org/4944
http://www.osvdb.org/4944
http://www.securityfocus.com/bid/10045
http://www.securityfocus.com/bid/10045
https://exchange.xforce.ibmcloud.com/vulnerabilities/15727
https://exchange.xforce.ibmcloud.com/vulnerabilities/15727