CVE-2002-2195

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.

Ссылки

http://online.securityfocus.com/archive/1/280786
http://www.iss.net/security_center/static/9488.php
Exploit
http://www.securityfocus.com/bid/5170
Exploit
Patch
http://online.securityfocus.com/archive/1/280786
http://www.iss.net/security_center/static/9488.php
Exploit
http://www.securityfocus.com/bid/5170
Exploit
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.20622

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-62m8-f85x-h9p8

github

почти 4 года назад