CVE-2009-3995

Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details are obtained from third party information.

• nullsoft winamp (<= 5.56) • nullsoft winamp 0.20a • nullsoft winamp 0.92 • nullsoft winamp 1.006 • nullsoft winamp 1.90 • nullsoft winamp 2.0 • nullsoft winamp 2.4 • nullsoft winamp 2.5e • nullsoft winamp 2.6 • nullsoft winamp 2.6x • nullsoft winamp 2.7x • nullsoft winamp 2.9 • nullsoft winamp 2.10 • nullsoft winamp 2.24 • nullsoft winamp 2.50 • nullsoft winamp 2.60 • nullsoft winamp 2.61 • nullsoft winamp 2.62 • nullsoft winamp 2.64 • nullsoft winamp 2.65 • nullsoft winamp 2.70 • nullsoft winamp 2.71 • nullsoft winamp 2.72 • nullsoft winamp 2.73 • nullsoft winamp 2.74 • nullsoft winamp 2.75 • nullsoft winamp 2.76 • nullsoft winamp 2.77 • nullsoft winamp 2.78 • nullsoft winamp 2.79 • nullsoft winamp 2.80 • nullsoft winamp 2.81 • nullsoft winamp 2.90 • nullsoft winamp 2.91 • nullsoft winamp 2.92 • nullsoft winamp 2.95 • nullsoft winamp 3.0 • nullsoft winamp 3.1 • nullsoft winamp 5.0 • nullsoft winamp 5.0.1 • nullsoft winamp 5.0.2 • nullsoft winamp 5.01 • nullsoft winamp 5.1 • nullsoft winamp 5.02 • nullsoft winamp 5.2 • nullsoft winamp 5.3 • nullsoft winamp 5.03 • nullsoft winamp 5.03a • nullsoft winamp 5.04 • nullsoft winamp 5.05 • nullsoft winamp 5.5 • nullsoft winamp 5.06 • nullsoft winamp 5.07 • nullsoft winamp 5.08 • nullsoft winamp 5.08c • nullsoft winamp 5.08d • nullsoft winamp 5.08e • nullsoft winamp 5.09 • nullsoft winamp 5.11 • nullsoft winamp 5.12 … and 26 more