CVEvulnerability

CVE-2007-2498

9.3 HIGH Published 2007-05-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.

Affected configurations

• nullsoft winamp 5.2 • nullsoft winamp 5.3 • nullsoft winamp 5.21 • nullsoft winamp 5.22 • nullsoft winamp 5.23 • nullsoft winamp 5.24 • nullsoft winamp 5.31 • nullsoft winamp 5.32 • nullsoft winamp 5.33 • nullsoft winamp 5.34

References