CVE Vulnerabilities

CVE-2004-1896

Published: Dec 31, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.6 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Affected Software

Name Vendor Start Version End Version
Winamp Nullsoft 2.91 (including) 2.91 (including)
Winamp Nullsoft 3.0 (including) 3.0 (including)
Winamp Nullsoft 3.1 (including) 3.1 (including)
Winamp Nullsoft 5.0.1 (including) 5.0.1 (including)
Winamp Nullsoft 5.0.2 (including) 5.0.2 (including)

References