CVE-2012-4045 in WinAmp

Résumé

par MITRE

Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 22/07/2012
• Divulgation: 22/07/2012
• Modérer: accepté
• Entrée: VDB-5578
• CPE: prêt
• CWE: CWE-119 (confirmé)
• CVSS: 10.0 (VulDB)
• EPSS: 0.03126
• KEV: non
• Activités: très faible
• Secteur: Hospital, Transportation, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4045
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4045
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4045/