PT-2007-5573 · Nullsoft · Winamp

Published 2007-08-17 · Updated 2018-10-15 · CVE-2007-4392

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Winamp version 5.35

Description The issue allows remote attackers to cause a denial of service, resulting in a program stack overflow and application crash. This can be achieved via an M3U file that recursively includes itself.

Recommendations For Winamp version 5.35, avoid using M3U files that recursively include themselves to prevent the denial of service. As a temporary workaround, consider restricting the use of M3U files until a patch is available.

Fix

Related Identifiers

CVE-2007-4392

Affected Products

Winamp

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2007-4392 · Security Note
• http://securityfocus.com/archive/1/archive/1/475260/100/200/threaded · Note
• http://morph3us.org/advisories/20070730-winamp-5.35.txt · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15504 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4392 · Note
• http://securityfocus.com/archive/1/archive/1/475161/100/200/threaded · Note
• http://securityfocus.com/archive/1/475161/100/200/threaded · Note
• http://securityreason.com/securityalert/3040 · Note
• http://securityfocus.com/archive/1/archive/1/475489/100/200/threaded · Note
• http://securityfocus.com/archive/1/475260/100/200/threaded · Note
• http://securityfocus.com/archive/1/archive/1/475183/100/200/threaded · Note
• http://securityfocus.com/archive/1/475489/100/200/threaded · Note
• http://securityfocus.com/archive/1/475183/100/200/threaded · Note