CVE Vulnerabilities

CVE-2002-2195

Published: Dec 31, 2002 | Modified: Nov 20, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.

Affected Software

Name Vendor Start Version End Version
Winamp Nullsoft 2.60 (including) 2.60 (including)
Winamp Nullsoft 2.61 (including) 2.61 (including)
Winamp Nullsoft 2.62 (including) 2.62 (including)
Winamp Nullsoft 2.64 (including) 2.64 (including)
Winamp Nullsoft 2.65 (including) 2.65 (including)
Winamp Nullsoft 2.70 (including) 2.70 (including)
Winamp Nullsoft 2.71 (including) 2.71 (including)
Winamp Nullsoft 2.72 (including) 2.72 (including)
Winamp Nullsoft 2.73 (including) 2.73 (including)
Winamp Nullsoft 2.74 (including) 2.74 (including)
Winamp Nullsoft 2.75 (including) 2.75 (including)
Winamp Nullsoft 2.76 (including) 2.76 (including)
Winamp Nullsoft 2.78 (including) 2.78 (including)
Winamp Nullsoft 2.79 (including) 2.79 (including)
Winamp Nullsoft 2.80 (including) 2.80 (including)

References