CVE-2012-4045 in WinAmp

सारांश

द्वारा MITRE

Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 22/07/2012
• प्रकटीकरण: 22/07/2012
• संयम: स्वीकृत
• प्रविष्टि: VDB-5578
• CPE: तैयार
• CWE: CWE-119 (पुष्टि की गई)
• CVSS: 10.0 (VulDB)
• EPSS: 0.03126
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Hospital, Transportation, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4045
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4045
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4045/