CveMateVulnerability intelligence

Nullsoft vulnerabilities, page 3

77 vulnerabilities

Known vulnerabilities in Nullsoft products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.

CVE-2004-1150nullsoftwinamp21y ago29-01-2005 05:00

Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.CVE-2004-1896nullsoftwinamp21y ago10-05-2005 04:00

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.CVE-2004-1373nullsoftshoutcast_server21y ago19-01-2005 05:00

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.CVE-2004-1396nullsoftwinamp21y ago12-02-2005 05:00

Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file.CVE-2004-1119nullsoftwinamp21y ago01-12-2004 05:00

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.CVE-2004-0820nullsoftwinamp22y ago02-09-2004 04:00

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.CVE-2002-2392nullsoftwinamp18y ago31-10-2007 16:00

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.CVE-2002-2412nullsoftwinamp18y ago01-11-2007 17:00

Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.CVE-2002-2195nullsoftwinamp20y ago16-11-2005 21:17

Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.CVE-2002-1524nullsoftwinamp22y ago01-09-2004 04:00

Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.CVE-2002-1176nullsoftwinamp23y ago20-12-2002 05:00

Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file.CVE-2002-1177nullsoftwinamp23y ago20-12-2002 05:00

Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag.CVE-2002-1470nullsoftshoutcast_server23y ago18-03-2003 05:00

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.CVE-2002-0284nullsoftwinamp24y ago03-05-2002 04:00

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.CVE-2002-0907nullsoftshoutcast_server24y ago31-08-2002 04:00

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".CVE-2002-0547nullsoftwinamp24y ago11-06-2002 04:00

Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.CVE-2002-0546nullsoftwinamp22y ago01-09-2004 04:00

Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file.CVE-2002-0199nullsoftshoutcast_server24y ago03-05-2002 04:00

Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.CVE-2009-1791debianlibsndfile+217y ago26-05-2009 17:00

Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.CVE-2009-1831nullsoftwinamp17y ago29-05-2009 22:00

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.