CVE-2004-1150
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/12/2004
Last modified:
11/07/2017
Description
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.
Impact
Base Score 2.0
5.10
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:* | ||
cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page