cbcvebase.
CVE-2009-4356
published 2009-12-18

CVE-2009-4356: Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or…

PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
4.97%
91.1th percentile
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file.

Affected

85 ranges· showing 25
VendorProductVersion rangeFixed in
nullsoftwinamp<= 5.56—
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
nullsoftwinamp——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.