CVEvulnerability
CVE-2009-1831
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
Affected configurations
• nullsoft winamp (<= 5.55)
• nullsoft winamp 2.0
• nullsoft winamp 2.4
• nullsoft winamp 2.5e
• nullsoft winamp 2.6x
• nullsoft winamp 2.7x
• nullsoft winamp 2.10
• nullsoft winamp 2.24
• nullsoft winamp 2.50
• nullsoft winamp 2.60
• nullsoft winamp 2.61
• nullsoft winamp 2.62
• nullsoft winamp 2.64
• nullsoft winamp 2.65
• nullsoft winamp 2.70
• nullsoft winamp 2.71
• nullsoft winamp 2.72
• nullsoft winamp 2.73
• nullsoft winamp 2.74
• nullsoft winamp 2.75
• nullsoft winamp 2.76
• nullsoft winamp 2.77
• nullsoft winamp 2.78
• nullsoft winamp 2.79
• nullsoft winamp 2.80
• nullsoft winamp 2.81
• nullsoft winamp 2.90
• nullsoft winamp 2.91
• nullsoft winamp 2.95
• nullsoft winamp 3.0
• nullsoft winamp 3.1
• nullsoft winamp 5.0
• nullsoft winamp 5.0.1
• nullsoft winamp 5.0.2
• nullsoft winamp 5.01
• nullsoft winamp 5.1
• nullsoft winamp 5.02
• nullsoft winamp 5.2
• nullsoft winamp 5.3
• nullsoft winamp 5.03
• nullsoft winamp 5.03a
• nullsoft winamp 5.04
• nullsoft winamp 5.05
• nullsoft winamp 5.5
• nullsoft winamp 5.06
• nullsoft winamp 5.07
• nullsoft winamp 5.08
• nullsoft winamp 5.08c
• nullsoft winamp 5.08d
• nullsoft winamp 5.08e
• nullsoft winamp 5.09
• nullsoft winamp 5.11
• nullsoft winamp 5.12
• nullsoft winamp 5.13
• nullsoft winamp 5.21
• nullsoft winamp 5.22
• nullsoft winamp 5.23
• nullsoft winamp 5.24
• nullsoft winamp 5.31
• nullsoft winamp 5.32
… and 14 more
Related
Weakness · not in database (1)
References
- http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html vrt-sourcefire.blogspot.com
- http://www.securityfocus.com/bid/35052 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50664 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683 oval.cisecurity.org
- https://www.exploit-db.com/exploits/8767 www.exploit-db.com
- https://www.exploit-db.com/exploits/8770 www.exploit-db.com
- https://www.exploit-db.com/exploits/8772 www.exploit-db.com
- https://www.exploit-db.com/exploits/8783 www.exploit-db.com
- http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html vrt-sourcefire.blogspot.com
- http://www.securityfocus.com/bid/35052 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50664 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683 oval.cisecurity.org
- https://www.exploit-db.com/exploits/8767 www.exploit-db.com
- https://www.exploit-db.com/exploits/8770 www.exploit-db.com
- https://www.exploit-db.com/exploits/8772 www.exploit-db.com
- https://www.exploit-db.com/exploits/8783 www.exploit-db.com