CVE-2009-4356 — Winamp vulnerability

CWE-1892 documents2 sources
Severity
9.3CRITICALNVD
EPSS
5.2%
top 10.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nullsoft Winamp
Timeline
PublishedDec 18
Latest updateMay 2

Description

Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDnullsoft/winamp5.56+84

Patches

Patch: forums.winamp.com ↗Patch: forums.winamp.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-jm9f-94hg-cq9c: Multiple integer overflows in the jpeg↗2022-05-02
▶