9.3

CVE-2009-4356

Exploit
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nullsoft ≫ Winamp Version <= 5.56
Nullsoft ≫ Winamp Version 0.20a
Nullsoft ≫ Winamp Version 0.92
Nullsoft ≫ Winamp Version 1.006
Nullsoft ≫ Winamp Version 1.90
Nullsoft ≫ Winamp Version 2.0
Nullsoft ≫ Winamp Version 2.4
Nullsoft ≫ Winamp Version 2.5e
Nullsoft ≫ Winamp Version 2.6
Nullsoft ≫ Winamp Version 2.6x
Nullsoft ≫ Winamp Version 2.7x
Nullsoft ≫ Winamp Version 2.9
Nullsoft ≫ Winamp Version 2.10
Nullsoft ≫ Winamp Version 2.24
Nullsoft ≫ Winamp Version 2.50
Nullsoft ≫ Winamp Version 2.60
Nullsoft ≫ Winamp Version 2.60 Edition full
Nullsoft ≫ Winamp Version 2.60 Edition lite
Nullsoft ≫ Winamp Version 2.61
Nullsoft ≫ Winamp Version 2.61 Edition full
Nullsoft ≫ Winamp Version 2.62
Nullsoft ≫ Winamp Version 2.62 Edition standard
Nullsoft ≫ Winamp Version 2.64
Nullsoft ≫ Winamp Version 2.64 Edition standard
Nullsoft ≫ Winamp Version 2.65
Nullsoft ≫ Winamp Version 2.70
Nullsoft ≫ Winamp Version 2.70 Edition full
Nullsoft ≫ Winamp Version 2.71
Nullsoft ≫ Winamp Version 2.72
Nullsoft ≫ Winamp Version 2.73
Nullsoft ≫ Winamp Version 2.73 Edition full
Nullsoft ≫ Winamp Version 2.74
Nullsoft ≫ Winamp Version 2.75
Nullsoft ≫ Winamp Version 2.76
Nullsoft ≫ Winamp Version 2.77
Nullsoft ≫ Winamp Version 2.78
Nullsoft ≫ Winamp Version 2.79
Nullsoft ≫ Winamp Version 2.80
Nullsoft ≫ Winamp Version 2.81
Nullsoft ≫ Winamp Version 2.90
Nullsoft ≫ Winamp Version 2.91
Nullsoft ≫ Winamp Version 2.92
Nullsoft ≫ Winamp Version 2.95
Nullsoft ≫ Winamp Version 3.0
Nullsoft ≫ Winamp Version 3.1
Nullsoft ≫ Winamp Version 5.0
Nullsoft ≫ Winamp Version 5.0.1
Nullsoft ≫ Winamp Version 5.0.2
Nullsoft ≫ Winamp Version 5.01
Nullsoft ≫ Winamp Version 5.1
Nullsoft ≫ Winamp Version 5.1 Update - Edition surround
Nullsoft ≫ Winamp Version 5.02
Nullsoft ≫ Winamp Version 5.2
Nullsoft ≫ Winamp Version 5.3
Nullsoft ≫ Winamp Version 5.03
Nullsoft ≫ Winamp Version 5.03a
Nullsoft ≫ Winamp Version 5.04
Nullsoft ≫ Winamp Version 5.05
Nullsoft ≫ Winamp Version 5.5
Nullsoft ≫ Winamp Version 5.06
Nullsoft ≫ Winamp Version 5.07
Nullsoft ≫ Winamp Version 5.08
Nullsoft ≫ Winamp Version 5.08 Update c
Nullsoft ≫ Winamp Version 5.08 Update d
Nullsoft ≫ Winamp Version 5.08 Update e
Nullsoft ≫ Winamp Version 5.08c
Nullsoft ≫ Winamp Version 5.08d
Nullsoft ≫ Winamp Version 5.08e
Nullsoft ≫ Winamp Version 5.09
Nullsoft ≫ Winamp Version 5.11
Nullsoft ≫ Winamp Version 5.12
Nullsoft ≫ Winamp Version 5.13
Nullsoft ≫ Winamp Version 5.21
Nullsoft ≫ Winamp Version 5.22
Nullsoft ≫ Winamp Version 5.23
Nullsoft ≫ Winamp Version 5.24
Nullsoft ≫ Winamp Version 5.31
Nullsoft ≫ Winamp Version 5.32
Nullsoft ≫ Winamp Version 5.33
Nullsoft ≫ Winamp Version 5.34
Nullsoft ≫ Winamp Version 5.35
Nullsoft ≫ Winamp Version 5.36
Nullsoft ≫ Winamp Version 5.51
Nullsoft ≫ Winamp Version 5.52
Nullsoft ≫ Winamp Version 5.53
Nullsoft ≫ Winamp Version 5.54
Nullsoft ≫ Winamp Version 5.55
Nullsoft ≫ Winamp Version 5.091
Nullsoft ≫ Winamp Version 5.093
Nullsoft ≫ Winamp Version 5.094
Nullsoft ≫ Winamp Version 5.111
Nullsoft ≫ Winamp Version 5.112
Nullsoft ≫ Winamp Version 5.531
Nullsoft ≫ Winamp Version 5.541
Nullsoft ≫ Winamp Version 5.551
Nullsoft ≫ Winamp Version 5.552
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.97% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://forums.winamp.com/showthread.php?threadid=315355
Patch
http://www.securityfocus.com/archive/1/508532/100/0/threaded
http://www.securityfocus.com/bid/37387
http://www.vupen.com/english/advisories/2009/3576
Vendor Advisory
http://www.vupen.com/exploits/Winamp_png_w5s_PNG_Data_Processing_Integer_Overflow_PoC_3576274.php
Vendor Advisory
Exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15743