10

CVE-2009-0263

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nullsoft ≫ Winamp Version <= 5.541
Nullsoft ≫ Winamp Version2.0
Nullsoft ≫ Winamp Version2.4
Nullsoft ≫ Winamp Version2.5e
Nullsoft ≫ Winamp Version2.6x
Nullsoft ≫ Winamp Version2.7x
Nullsoft ≫ Winamp Version2.10
Nullsoft ≫ Winamp Version2.24
Nullsoft ≫ Winamp Version2.50
Nullsoft ≫ Winamp Version2.60
Nullsoft ≫ Winamp Version2.60 Editionfull
Nullsoft ≫ Winamp Version2.60 Editionlite
Nullsoft ≫ Winamp Version2.61
Nullsoft ≫ Winamp Version2.61 Editionfull
Nullsoft ≫ Winamp Version2.62
Nullsoft ≫ Winamp Version2.62 Editionstandard
Nullsoft ≫ Winamp Version2.64
Nullsoft ≫ Winamp Version2.64 Editionstandard
Nullsoft ≫ Winamp Version2.65
Nullsoft ≫ Winamp Version2.70
Nullsoft ≫ Winamp Version2.70 Editionfull
Nullsoft ≫ Winamp Version2.71
Nullsoft ≫ Winamp Version2.72
Nullsoft ≫ Winamp Version2.73
Nullsoft ≫ Winamp Version2.73 Editionfull
Nullsoft ≫ Winamp Version2.74
Nullsoft ≫ Winamp Version2.75
Nullsoft ≫ Winamp Version2.76
Nullsoft ≫ Winamp Version2.77
Nullsoft ≫ Winamp Version2.78
Nullsoft ≫ Winamp Version2.79
Nullsoft ≫ Winamp Version2.80
Nullsoft ≫ Winamp Version2.81
Nullsoft ≫ Winamp Version2.90
Nullsoft ≫ Winamp Version2.91
Nullsoft ≫ Winamp Version2.95
Nullsoft ≫ Winamp Version3.0
Nullsoft ≫ Winamp Version3.1
Nullsoft ≫ Winamp Version5.0
Nullsoft ≫ Winamp Version5.0.1
Nullsoft ≫ Winamp Version5.0.2
Nullsoft ≫ Winamp Version5.01
Nullsoft ≫ Winamp Version5.1
Nullsoft ≫ Winamp Version5.02
Nullsoft ≫ Winamp Version5.2
Nullsoft ≫ Winamp Version5.3
Nullsoft ≫ Winamp Version5.03
Nullsoft ≫ Winamp Version5.03a
Nullsoft ≫ Winamp Version5.04
Nullsoft ≫ Winamp Version5.05
Nullsoft ≫ Winamp Version5.5
Nullsoft ≫ Winamp Version5.06
Nullsoft ≫ Winamp Version5.07
Nullsoft ≫ Winamp Version5.08
Nullsoft ≫ Winamp Version5.08 Updatec
Nullsoft ≫ Winamp Version5.08 Updated
Nullsoft ≫ Winamp Version5.08 Updatee
Nullsoft ≫ Winamp Version5.08c
Nullsoft ≫ Winamp Version5.08d
Nullsoft ≫ Winamp Version5.08e
Nullsoft ≫ Winamp Version5.09
Nullsoft ≫ Winamp Version5.11
Nullsoft ≫ Winamp Version5.12
Nullsoft ≫ Winamp Version5.13
Nullsoft ≫ Winamp Version5.21
Nullsoft ≫ Winamp Version5.22
Nullsoft ≫ Winamp Version5.23
Nullsoft ≫ Winamp Version5.24
Nullsoft ≫ Winamp Version5.31
Nullsoft ≫ Winamp Version5.32
Nullsoft ≫ Winamp Version5.33
Nullsoft ≫ Winamp Version5.34
Nullsoft ≫ Winamp Version5.35
Nullsoft ≫ Winamp Version5.36
Nullsoft ≫ Winamp Version5.51
Nullsoft ≫ Winamp Version5.52
Nullsoft ≫ Winamp Version5.53
Nullsoft ≫ Winamp Version5.54
Nullsoft ≫ Winamp Version5.091
Nullsoft ≫ Winamp Version5.093
Nullsoft ≫ Winamp Version5.094
Nullsoft ≫ Winamp Version5.111
Nullsoft ≫ Winamp Version5.112
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 16.74% 0.966
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/33478
http://www.securityfocus.com/bid/33226
http://www.vupen.com/english/advisories/2009/0113
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756
https://www.exploit-db.com/exploits/7742