CVE Vulnerabilities

CVE-2002-2195

Published: Dec 31, 2002 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.

Affected Software

Name Vendor Start Version End Version
Winamp Nullsoft 2.60 (including) 2.60 (including)
Winamp Nullsoft 2.61 (including) 2.61 (including)
Winamp Nullsoft 2.62 (including) 2.62 (including)
Winamp Nullsoft 2.64 (including) 2.64 (including)
Winamp Nullsoft 2.65 (including) 2.65 (including)
Winamp Nullsoft 2.70 (including) 2.70 (including)
Winamp Nullsoft 2.71 (including) 2.71 (including)
Winamp Nullsoft 2.72 (including) 2.72 (including)
Winamp Nullsoft 2.73 (including) 2.73 (including)
Winamp Nullsoft 2.74 (including) 2.74 (including)
Winamp Nullsoft 2.75 (including) 2.75 (including)
Winamp Nullsoft 2.76 (including) 2.76 (including)
Winamp Nullsoft 2.78 (including) 2.78 (including)
Winamp Nullsoft 2.79 (including) 2.79 (including)
Winamp Nullsoft 2.80 (including) 2.80 (including)

References