CVE-2009-0263

high · 10

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.

CVSS

16.7%

EPSS (exploit prob.)

97th

EPSS percentile

2009-01-23

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
nullsoft	winamp	<= 5.541
nullsoft	winamp	2.0
nullsoft	winamp	2.4
nullsoft	winamp	2.5e
nullsoft	winamp	2.6x
nullsoft	winamp	2.7x
nullsoft	winamp	2.10
nullsoft	winamp	2.24
nullsoft	winamp	2.50
nullsoft	winamp	2.60
nullsoft	winamp	2.60
nullsoft	winamp	2.60
nullsoft	winamp	2.61
nullsoft	winamp	2.61
nullsoft	winamp	2.62
nullsoft	winamp	2.62
nullsoft	winamp	2.64
nullsoft	winamp	2.64
nullsoft	winamp	2.65
nullsoft	winamp	2.70
nullsoft	winamp	2.70
nullsoft	winamp	2.71
nullsoft	winamp	2.72
nullsoft	winamp	2.73
nullsoft	winamp	2.73
nullsoft	winamp	2.74
nullsoft	winamp	2.75
nullsoft	winamp	2.76
nullsoft	winamp	2.77
nullsoft	winamp	2.78
nullsoft	winamp	2.79
nullsoft	winamp	2.80
nullsoft	winamp	2.81
nullsoft	winamp	2.90
nullsoft	winamp	2.91
nullsoft	winamp	2.95
nullsoft	winamp	3.0
nullsoft	winamp	3.1
nullsoft	winamp	5.0
nullsoft	winamp	5.0.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0263