CVE-2009-0263

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.

• nullsoft winamp (<= 5.541) • nullsoft winamp 2.0 • nullsoft winamp 2.4 • nullsoft winamp 2.5e • nullsoft winamp 2.6x • nullsoft winamp 2.7x • nullsoft winamp 2.10 • nullsoft winamp 2.24 • nullsoft winamp 2.50 • nullsoft winamp 2.60 • nullsoft winamp 2.61 • nullsoft winamp 2.62 • nullsoft winamp 2.64 • nullsoft winamp 2.65 • nullsoft winamp 2.70 • nullsoft winamp 2.71 • nullsoft winamp 2.72 • nullsoft winamp 2.73 • nullsoft winamp 2.74 • nullsoft winamp 2.75 • nullsoft winamp 2.76 • nullsoft winamp 2.77 • nullsoft winamp 2.78 • nullsoft winamp 2.79 • nullsoft winamp 2.80 • nullsoft winamp 2.81 • nullsoft winamp 2.90 • nullsoft winamp 2.91 • nullsoft winamp 2.95 • nullsoft winamp 3.0 • nullsoft winamp 3.1 • nullsoft winamp 5.0 • nullsoft winamp 5.0.1 • nullsoft winamp 5.0.2 • nullsoft winamp 5.01 • nullsoft winamp 5.1 • nullsoft winamp 5.02 • nullsoft winamp 5.2 • nullsoft winamp 5.3 • nullsoft winamp 5.03 • nullsoft winamp 5.03a • nullsoft winamp 5.04 • nullsoft winamp 5.05 • nullsoft winamp 5.5 • nullsoft winamp 5.06 • nullsoft winamp 5.07 • nullsoft winamp 5.08 • nullsoft winamp 5.08c • nullsoft winamp 5.08d • nullsoft winamp 5.08e • nullsoft winamp 5.09 • nullsoft winamp 5.11 • nullsoft winamp 5.12 • nullsoft winamp 5.13 • nullsoft winamp 5.21 • nullsoft winamp 5.22 • nullsoft winamp 5.23 • nullsoft winamp 5.24 • nullsoft winamp 5.31 • nullsoft winamp 5.32 … and 13 more