PT-2011-5148 · Nullsoft · Winamp

Published 2011-12-16 · Updated 2017-09-19 · CVE-2011-4857

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.623

Description The issue is related to a heap-based buffer overflow in the in mod.dll plugin, which allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file.

Recommendations For versions prior to 5.623, update to version 5.623 or later to resolve the issue. As a temporary workaround, consider disabling the in mod.dll plugin until a patch is available. Restrict access to Impulse Tracker (IT) files to minimize the risk of exploitation.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-4857

Affected Products

Winamp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-4857 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72054 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4857 · Note
• http://xforce.iss.net/xforce/xfdb/72054 · Note
• http://secunia.com/advisories/46882 · Note
• http://forums.winamp.com/showthread.php?t=332010 · Note