CVE-2006-0720

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.

CVSS v2.0

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

10.54% chance of exploitation in the next 30 days, 95th percentile

Published

2006-02-23

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/26245

References

• CVE Record
• NVD entry

Related

• CVE-2006-0719
• CVE-2006-0721
• CVE-2006-0717
• CVE-2006-0725
• CVE-2006-0715
• CVE-2006-0728