The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Winamp | Nullsoft | * | 5.55 (including) |
| Winamp | Nullsoft | 2.0 (including) | 2.0 (including) |
| Winamp | Nullsoft | 2.4 (including) | 2.4 (including) |
| Winamp | Nullsoft | 2.5e (including) | 2.5e (including) |
| Winamp | Nullsoft | 2.6x (including) | 2.6x (including) |
| Winamp | Nullsoft | 2.7x (including) | 2.7x (including) |
| Winamp | Nullsoft | 2.10 (including) | 2.10 (including) |
| Winamp | Nullsoft | 2.24 (including) | 2.24 (including) |
| Winamp | Nullsoft | 2.50 (including) | 2.50 (including) |
| Winamp | Nullsoft | 2.60 (including) | 2.60 (including) |
| Winamp | Nullsoft | 2.61 (including) | 2.61 (including) |
| Winamp | Nullsoft | 2.62 (including) | 2.62 (including) |
| Winamp | Nullsoft | 2.64 (including) | 2.64 (including) |
| Winamp | Nullsoft | 2.65 (including) | 2.65 (including) |
| Winamp | Nullsoft | 2.70 (including) | 2.70 (including) |
| Winamp | Nullsoft | 2.71 (including) | 2.71 (including) |
| Winamp | Nullsoft | 2.72 (including) | 2.72 (including) |
| Winamp | Nullsoft | 2.73 (including) | 2.73 (including) |
| Winamp | Nullsoft | 2.74 (including) | 2.74 (including) |
| Winamp | Nullsoft | 2.75 (including) | 2.75 (including) |
| Winamp | Nullsoft | 2.76 (including) | 2.76 (including) |
| Winamp | Nullsoft | 2.77 (including) | 2.77 (including) |
| Winamp | Nullsoft | 2.78 (including) | 2.78 (including) |
| Winamp | Nullsoft | 2.79 (including) | 2.79 (including) |
| Winamp | Nullsoft | 2.80 (including) | 2.80 (including) |
| Winamp | Nullsoft | 2.81 (including) | 2.81 (including) |
| Winamp | Nullsoft | 2.90 (including) | 2.90 (including) |
| Winamp | Nullsoft | 2.91 (including) | 2.91 (including) |
| Winamp | Nullsoft | 2.95 (including) | 2.95 (including) |
| Winamp | Nullsoft | 3.0 (including) | 3.0 (including) |
| Winamp | Nullsoft | 3.1 (including) | 3.1 (including) |
| Winamp | Nullsoft | 5.0 (including) | 5.0 (including) |
| Winamp | Nullsoft | 5.0.1 (including) | 5.0.1 (including) |
| Winamp | Nullsoft | 5.0.2 (including) | 5.0.2 (including) |
| Winamp | Nullsoft | 5.01 (including) | 5.01 (including) |
| Winamp | Nullsoft | 5.1 (including) | 5.1 (including) |
| Winamp | Nullsoft | 5.02 (including) | 5.02 (including) |
| Winamp | Nullsoft | 5.2 (including) | 5.2 (including) |
| Winamp | Nullsoft | 5.3 (including) | 5.3 (including) |
| Winamp | Nullsoft | 5.03 (including) | 5.03 (including) |
| Winamp | Nullsoft | 5.03a (including) | 5.03a (including) |
| Winamp | Nullsoft | 5.04 (including) | 5.04 (including) |
| Winamp | Nullsoft | 5.05 (including) | 5.05 (including) |
| Winamp | Nullsoft | 5.5 (including) | 5.5 (including) |
| Winamp | Nullsoft | 5.06 (including) | 5.06 (including) |
| Winamp | Nullsoft | 5.07 (including) | 5.07 (including) |
| Winamp | Nullsoft | 5.08 (including) | 5.08 (including) |
| Winamp | Nullsoft | 5.08-c (including) | 5.08-c (including) |
| Winamp | Nullsoft | 5.08-d (including) | 5.08-d (including) |
| Winamp | Nullsoft | 5.08-e (including) | 5.08-e (including) |
| Winamp | Nullsoft | 5.08c (including) | 5.08c (including) |
| Winamp | Nullsoft | 5.08d (including) | 5.08d (including) |
| Winamp | Nullsoft | 5.08e (including) | 5.08e (including) |
| Winamp | Nullsoft | 5.09 (including) | 5.09 (including) |
| Winamp | Nullsoft | 5.11 (including) | 5.11 (including) |
| Winamp | Nullsoft | 5.12 (including) | 5.12 (including) |
| Winamp | Nullsoft | 5.13 (including) | 5.13 (including) |
| Winamp | Nullsoft | 5.21 (including) | 5.21 (including) |
| Winamp | Nullsoft | 5.22 (including) | 5.22 (including) |
| Winamp | Nullsoft | 5.23 (including) | 5.23 (including) |
| Winamp | Nullsoft | 5.24 (including) | 5.24 (including) |
| Winamp | Nullsoft | 5.31 (including) | 5.31 (including) |
| Winamp | Nullsoft | 5.32 (including) | 5.32 (including) |
| Winamp | Nullsoft | 5.33 (including) | 5.33 (including) |
| Winamp | Nullsoft | 5.34 (including) | 5.34 (including) |
| Winamp | Nullsoft | 5.35 (including) | 5.35 (including) |
| Winamp | Nullsoft | 5.36 (including) | 5.36 (including) |
| Winamp | Nullsoft | 5.51 (including) | 5.51 (including) |
| Winamp | Nullsoft | 5.52 (including) | 5.52 (including) |
| Winamp | Nullsoft | 5.53 (including) | 5.53 (including) |
| Winamp | Nullsoft | 5.54 (including) | 5.54 (including) |
| Winamp | Nullsoft | 5.091 (including) | 5.091 (including) |
| Winamp | Nullsoft | 5.093 (including) | 5.093 (including) |
| Winamp | Nullsoft | 5.094 (including) | 5.094 (including) |
| Winamp | Nullsoft | 5.111 (including) | 5.111 (including) |
| Winamp | Nullsoft | 5.112 (including) | 5.112 (including) |
| Winamp | Nullsoft | 5.541 (including) | 5.541 (including) |