CVE-2004-1150

Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.

CVSS v2.0

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

8.71% chance of exploitation in the next 30 days, 95th percentile

Published

2005-01-29

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25061

References

• CVE Record
• NVD entry

Related

• CVE-2004-1147
• CVE-2004-1151
• CVE-2004-1137
• CVE-2004-1161
• CVE-2004-1135
• CVE-2004-1165