Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-2180 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Winamp

7 documents3 sources
Severity
7.1HIGHNVD
EPSS
9.4%
top 7.20%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Nullsoft Winamp
Timeline
PublishedApr 24
Latest updateMay 1

Description

Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted WMV file.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-wpx4-v8wc-37cm: Buffer overflow in Nullsoft Winamp 5↗2022-05-01
▶

💥Exploits & PoCs

5
Exploit-DB
Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)↗2008-09-28
▶
Exploit-DB
Winamp 5.3 - '.wmv' Remote Denial of Service↗2007-04-19
▶
Exploit-DB
Microsoft Internet Explorer - FTP Server Response Denial of Service (MS07-016)↗2007-03-09
▶
Exploit-DB
Microsoft Internet Explorer 6 - 'mshtml.dll' Null Pointer Dereference↗2007-02-05
▶
Exploit-DB
Microsoft Windows Explorer - '.AVI' File Denial of Service↗2007-01-24
▶