Integer Overflow Vulnerabilities in Winamp's JPEG and PNG Filters
CVE-2009-4356

Currently unrated

Key Information:

Vendor

Nullsoft

Status
Vendor
CVE Published:
18 December 2009

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC

What is CVE-2009-4356?

Multiple integer overflow issues have been identified in the .jpeg.w5s and .png.w5s filters of Winamp prior to version 5.57. These vulnerabilities can be exploited by an attacker to execute arbitrary code remotely when a user processes specially crafted JPEG or PNG data embedded within MP3 files. Such exploits can lead to unauthorized control over the impacted system, emphasizing the need for users to update their Winamp software to the latest version to mitigate risks.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.