CVE-2006-0476

EPSS 74.5%

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/16531unverified exploitdbwww.exploit-db.com/exploits/1458unverified exploitdbwww.exploit-db.com/exploits/1460unverified cve_referencewww.exploit-db.com/exploits/3422unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/18649 http://securityreason.com/securityalert/386 http://securityreason.com/securityalert/398 http://securitytracker.com/id?1015552 https://exchange.xforce.ibmcloud.com/vulnerabilities/24361 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402 https://www.exploit-db.com/exploits/3422 http://www.heise.de/newsticker/meldung/68981 http://www.kb.cert.org/vuls/id/604745 http://www.osvdb.org/22789 http://www.securityfocus.com/archive/1/423436/100/0/threaded http://www.securityfocus.com/archive/1/423548/100/0/threaded