CVEvulnerability

CVE-2006-3228

9.3 HIGH Published 2006-06-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-06-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file.

Affected configurations

• nullsoft winamp (<= 5.23) • nullsoft winamp 2.90 • nullsoft winamp 2.91 • nullsoft winamp 2.95 • nullsoft winamp 3.0 • nullsoft winamp 3.1 • nullsoft winamp 5.0 • nullsoft winamp 5.0.1 • nullsoft winamp 5.0.2 • nullsoft winamp 5.01 • nullsoft winamp 5.1 • nullsoft winamp 5.02 • nullsoft winamp 5.2 • nullsoft winamp 5.03 • nullsoft winamp 5.03a • nullsoft winamp 5.04 • nullsoft winamp 5.05 • nullsoft winamp 5.06 • nullsoft winamp 5.07 • nullsoft winamp 5.08c • nullsoft winamp 5.08d • nullsoft winamp 5.08e • nullsoft winamp 5.09 • nullsoft winamp 5.11 • nullsoft winamp 5.12 • nullsoft winamp 5.13 • nullsoft winamp 5.21 • nullsoft winamp 5.091 • nullsoft winamp 5.093 • nullsoft winamp 5.094

References