CVE-2010-1523

Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2) video stream.

Score

CVSS 2.0 9.3 Critical

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2010-11-06

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Winamp (Nullsoft)

References

• http://forums.winamp.com/showthread.php?t=322995
• http://secunia.com/secunia_research/2010-95/
• http://www.securityfocus.com/archive/1/514484/100/0/threaded
• http://www.securityfocus.com/bid/44466
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12056