Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-0624 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Winamp

4 documents3 sources
Severity
7.5HIGHNVD
EPSS
6.4%
top 8.91%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Nullsoft Winamp
Timeline
PublishedJul 20
Latest updateApr 30

Description

Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDnullsoft/winamp2.64

🔴Vulnerability Details

1
GHSA
GHSA-m85g-37m6-fpww: Buffer overflow in Winamp 2↗2022-04-30
▶

💥Exploits & PoCs

2
Exploit-DB
Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow↗2002-06-14
▶
Exploit-DB
NullSoft Winamp 2.64 - '.m3u' Playlist Buffer Overflow↗2001-01-17
▶