CVE-2008-0065 in Nullsoft Winamp

Riassunto

di VulDB • 18/06/2026

Multiple stack-based buffer overflow in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 03/01/2008
• Divulgazione: 22/01/2008
• Moderazione: accettato
• Voce: VDB-40641
• CPE: pronto
• CWE: CWE-119 (confermato)
• Sfruttamento: Scaricare
• CVSS: 10.0 (NVD)
• EPSS: 0.61275
• KEV: no
• Attività: molto basso
• Settore: Police, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-0065
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-0065
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-0065/