CVE-2005-3188
published 2005-12-31CVE-2005-3188: Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a…
PriorityP333high7.6CVSS 2.0
AVNACHAuNCCICAC
EPSS
7.20%
93.5th percentile
Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
| nullsoft | winamp | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-249v-jf5r-cp5r: Multiple buffer overflows in NullSoft Winamp 5
ghsa_unreviewed·2022-05-01·CVSS 7.6
CVE-2006-0708 [HIGH] GHSA-249v-jf5r-cp5r: Multiple buffer overflows in NullSoft Winamp 5
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containing a long URL ending in .wma, (2) a pls file containing a File1 field with a long URL ending in .wma, or (3) an m3u file with a long filename, variants of CVE-2005-3188 and CVE-2006-0476.
GHSA
GHSA-8jv5-qc9q-5qfw: Buffer overflow in Nullsoft Winamp 5
ghsa_unreviewed·2022-05-01·CVSS 7.6
CVE-2005-3188 [HIGH] GHSA-8jv5-qc9q-5qfw: Buffer overflow in Nullsoft Winamp 5
Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://securityreason.com/securityalert/397http://securitytracker.com/id?1015565http://securitytracker.com/id?1015621http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378http://www.osvdb.org/22975http://www.securityfocus.com/bid/16462https://exchange.xforce.ibmcloud.com/vulnerabilities/24417http://securityreason.com/securityalert/397http://securitytracker.com/id?1015565http://securitytracker.com/id?1015621http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378http://www.osvdb.org/22975http://www.securityfocus.com/bid/16462https://exchange.xforce.ibmcloud.com/vulnerabilities/24417
2005-12-31
Published