cbcvebase.
CVE-2009-3997
published 2009-12-18

CVE-2009-3997: Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer…

PriorityP342critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.72%
92.1th percentile
Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow.

Affected

85 ranges· showing 25
VendorProductVersion rangeFixed in
nullsoftwinamp<= 5.56—
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.