CVE Vulnerabilities

CVE-2004-1896

Published: Dec 31, 2004 | Modified: Nov 20, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.6 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Affected Software

Name Vendor Start Version End Version
Winamp Nullsoft 2.91 (including) 2.91 (including)
Winamp Nullsoft 3.0 (including) 3.0 (including)
Winamp Nullsoft 3.1 (including) 3.1 (including)
Winamp Nullsoft 5.0.1 (including) 5.0.1 (including)
Winamp Nullsoft 5.0.2 (including) 5.0.2 (including)

References