CVE-2003-0765

The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*
cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:45

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=106305643432112&w=2 - () http://marc.info/?l=bugtraq&m=106305643432112&w=2 -

Information

Published : 2003-09-17 04:00

Updated : 2024-11-20 23:45


NVD link : CVE-2003-0765

Mitre link : CVE-2003-0765

CVE.ORG link : CVE-2003-0765


JSON object : View

Products Affected

nullsoft

  • winamp