Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sys 49152

#39762of 53,630
6.8Total CVSS
Vulnerabilities · 1
PT-2007-7260
6.8
2007-12-17
Nullsoft · Nullsoft Winamp · CVE-2007-6403
**Name of the Vulnerable Software and Affected Versions** Nullsoft Winamp version 5.32 **Description** The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved through crafted unicode in a .mp4 file with specific tags, contained within a certain .rar archive. For exploitation to occur, the victim must select a particular menu option at the time of the attack. **Recommendations** For Nullsoft Winamp version 5.32, consider avoiding the use of .mp4 files with crafted tags until a fix is available. As a temporary workaround, refrain from selecting the specific menu option that enables exploitation when interacting with potentially malicious archives or files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.