CVE-2005-3188

Severity

76%

Complexity

49%

Confidentiality

165%

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.

CVSS 2.0 Base Score 7.6. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (AV:N/AC:H/Au:N/C:C/I:C/A:C).

Overview

First reported 19 years ago

2005-12-31 05:00:00

Last updated 7 years ago

2017-07-11 01:33:00

Affected Software

Nullsoft Winamp 5.094

5.094

References

397

1015565

Patch

1015621

Vendor Advisory

20060201 Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability

Exploit, Patch, Vendor Advisory

22975

Patch

16462

winamp-wma-ext-bo(24417)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.