CVE-2005-2310

Опубликовано: 19 июл. 2005

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.

Ссылки

http://secunia.com/advisories/16077
Vendor Advisory
http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14
Exploit
Vendor Advisory
http://securitytracker.com/id?1014483
Exploit
http://www.osvdb.org/17897
http://www.securityfocus.com/bid/14276
http://www.vupen.com/english/advisories/2005/1106
http://www.winamp.com/player/version_history.php
http://secunia.com/advisories/16077
Vendor Advisory
http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14
Exploit
Vendor Advisory
http://securitytracker.com/id?1014483
Exploit
http://www.osvdb.org/17897
http://www.securityfocus.com/bid/14276
http://www.vupen.com/english/advisories/2005/1106
http://www.winamp.com/player/version_history.php

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*

Версия до 5.093 (включая)

cpe:2.3:a:nullsoft:winamp:5.03a:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:5.09:*:*:*:*:*:*:*

cpe:2.3:a:nullsoft:winamp:5.091:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.0772

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-g42v-97pv-hf4v

github

почти 4 года назад