ID CVE-2007-2180
Summary Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted WMV file.
References
Vulnerable Configurations
  • cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*
    cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*
CVSS
Base: 7.1 (as of 16-10-2018 - 16:42)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:C
oval via4
accepted 2014-04-07T04:01:59.318-04:00
class vulnerability
contributors
  • name Shane Shaffer
    organization G2, Inc.
  • name Shane Shaffer
    organization G2, Inc.
  • name Maria Mikhno
    organization ALTX-SOFT
definition_extensions
comment Winamp is installed
oval oval:org.mitre.oval:def:6897
description Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted WMV file.
family windows
id oval:org.mitre.oval:def:15697
status accepted
submitted 2012-07-20T09:18:28.692-04:00
title Buffer overflow in Nullsoft Winamp 5.3
version 8
refmap via4
bid 23568
bugtraq 20070419 Winamp <= (WMV) 5.3 Buffer Overflow DOS Exploit (0-DAY)
exploit-db 3768
sreason 2601
xf winamp-wmv-bo(33764)
Last major update 16-10-2018 - 16:42
Published 24-04-2007 - 17:19
Back to Top