Integer Overflow Vulnerabilities in Winamp's JPEG and PNG Filters
CVE-2009-4356

Currently unrated

Key Information:

Vendor

Nullsoft

Status
Winamp
Vendor
CVE Published:
18 December 2009

What is CVE-2009-4356?

Multiple integer overflow issues have been identified in the .jpeg.w5s and .png.w5s filters of Winamp prior to version 5.57. These vulnerabilities can be exploited by an attacker to execute arbitrary code remotely when a user processes specially crafted JPEG or PNG data embedded within MP3 files. Such exploits can lead to unauthorized control over the impacted system, emphasizing the need for users to update their Winamp software to the latest version to mitigate risks.

References

http://www.securityfocus.com/archive/1/508532/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://forums.winamp.com/showthread.php?threadid=315355
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/3576
vdb-entryx_refsource_VUPEN

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.