CVE-2006-5567

EPSS 13.5%

Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/2708unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=431 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=432 http://secunia.com/advisories/22580 http://securitytracker.com/id?1017119 http://securitytracker.com/id?1017120 https://exchange.xforce.ibmcloud.com/vulnerabilities/29804 https://exchange.xforce.ibmcloud.com/vulnerabilities/29807 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15686 http://www.kb.cert.org/vuls/id/449092 http://www.securityfocus.com/bid/20744 http://www.vupen.com/english/advisories/2006/4196 http://www.winamp.com/player/version_history.php#5.31