CVEvulnerability
CVE-2004-1396
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
Description
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file.
Affected configurations
• nullsoft winamp 5.07
References
- http://forums.winamp.com/showthread.php?s=&threadid=202007 Exploit
- http://marc.info/?l=bugtraq&m=110297310503541&w=2 marc.info
- http://marc.info/?l=full-disclosure&m=110303988101973&w=2 marc.info
- http://securitytracker.com/alerts/2004/Dec/1012525.html securitytracker.com
- http://www.kb.cert.org/vuls/id/372968 US Government Resource
- http://www.securityfocus.com/bid/11909 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18466 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18467 exchange.xforce.ibmcloud.com
- http://forums.winamp.com/showthread.php?s=&threadid=202007 Exploit
- http://marc.info/?l=bugtraq&m=110297310503541&w=2 marc.info
- http://marc.info/?l=full-disclosure&m=110303988101973&w=2 marc.info
- http://securitytracker.com/alerts/2004/Dec/1012525.html securitytracker.com
- http://www.kb.cert.org/vuls/id/372968 US Government Resource
- http://www.securityfocus.com/bid/11909 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18466 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18467 exchange.xforce.ibmcloud.com