CVE-2012-4045 in WinAmp

الملخص

بحسب MITRE

Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 22/07/2012
• إفشاء: 22/07/2012
• الاعتدال: تمت الموافقة
• إدخال: VDB-5578
• CPE: جاهز
• CWE: CWE-119 (مؤكد)
• CVSS: 10.0 (VulDB)
• EPSS: 0.03126
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Pharma, Education, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4045
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4045
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4045/