Integer Overflow and Buffer Overflow Vulnerability in Nullsoft Winamp
CVE-2009-1831
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 81%
What is CVE-2009-1831?
The Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp prior to version 5.552 contains a vulnerability that allows remote attackers to execute arbitrary code through a specially crafted MAKI file. This security issue arises from improper sign extension, leading to an integer overflow and subsequent stack-based buffer overflow, which can compromise the integrity and security of affected systems.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.