Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Max CVSS
10.0
EPSS Score
4.99%
Published
2011-12-16
Updated
2017-09-19
Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.
Max CVSS
9.3
EPSS Score
32.72%
Published
2011-12-16
Updated
2017-09-19
2 vulnerabilities found