Total vulnerabilities in the database
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.
| Software | From | Fixed in |
|---|---|---|
| nullsoft / winamp | 5.05 | 5.05.x |
| nullsoft / winamp | 5.02 | 5.02.x |
| nullsoft / winamp | 5.01 | 5.01.x |
| nullsoft / winamp | 5.04 | 5.04.x |
| nullsoft / winamp | 5.06 | 5.06.x |
| nullsoft / winamp | 5.07 | 5.07.x |
| nullsoft / winamp | 5.03 | 5.03.x |
| nullsoft / winamp | 5.0 | 5.0.x |
| nullsoft / winamp | 5.08c | 5.08c.x |