CVEvulnerability

CVE-2006-0708

9.3 HIGH Published 2006-02-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-02-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containing a long URL ending in .wma, (2) a pls file containing a File1 field with a long URL ending in .wma, or (3) an m3u file with a long filename, variants of CVE-2005-3188 and CVE-2006-0476.

Affected configurations

• nullsoft winamp 5.0 • nullsoft winamp 5.01 • nullsoft winamp 5.02 • nullsoft winamp 5.03 • nullsoft winamp 5.04 • nullsoft winamp 5.05 • nullsoft winamp 5.06 • nullsoft winamp 5.07 • nullsoft winamp 5.08c • nullsoft winamp 5.08d • nullsoft winamp 5.08e • nullsoft winamp 5.09 • nullsoft winamp 5.11 • nullsoft winamp 5.12 • nullsoft winamp 5.13 • nullsoft winamp 5.091 • nullsoft winamp 5.093 • nullsoft winamp 5.094

References