Vulnerabilities > Nullsoft > Winamp > High

DATE CVE VULNERABILITY TITLE RISK
2002-12-26 CVE-2002-1177 Buffer Overrun vulnerability in Nullsoft Winamp 3.0
Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag.
network
low complexity
nullsoft
7.5
2002-12-26 CVE-2002-1176 Remote Security vulnerability in Nullsoft Winamp 2.81
Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file.
network
low complexity
nullsoft
7.5
2002-07-03 CVE-2002-0547 Buffer Overflow vulnerability in Nullsoft Winamp Minibrowser ID3v2
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.
network
low complexity
nullsoft
7.5
2002-07-03 CVE-2002-0546 Unspecified vulnerability in Nullsoft Winamp 2.78/2.79
Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file.
network
low complexity
nullsoft
7.5
2001-06-27 CVE-2001-0490 Remote Security vulnerability in Winamp 2.6X/2.7X
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
network
low complexity
nullsoft
7.5
2000-07-20 CVE-2000-0624 Unspecified vulnerability in Nullsoft Winamp
Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist.
network
low complexity
nullsoft
7.5
2000-01-04 CVE-2000-0049 Unspecified vulnerability in Nullsoft Winamp 2.0/2.10
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
local
low complexity
nullsoft
7.2