CVE-2009-0263
N/A
Published: January 23, 2009 at 06:38 PM UTC
Updated: June 16, 2026 at 11:04 PM UTC
1 product affected across 1 vendorWinamp
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 17%
Description
Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 5.5412.02.102.242.42.502.5e2.602.612.622.642.652.6x2.702.712.722.732.742.752.762.772.782.792.7x2.802.812.902.912.953.03.15.05.0.15.0.25.015.025.035.03a5.045.055.065.075.085.08 c5.08 d5.08 e5.08c5.08d5.08e5.095.0915.0935.0945.15.115.1115.1125.125.135.25.215.225.235.245.35.315.325.335.345.355.365.55.515.525.535.54
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (5)
VDB Entryx_refsource_VUPEN
Source: [email protected]
http://www.vupen.com/english/advisories/2009/0113VDB EntrySignaturex_refsource_OVAL
Source: [email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756Quick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card