Skip to content

CVE-2004-1896

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote...

7.6 High

CVE-2004-1896 is a high vulnerability (CVSS 7.6) in Nullsoft Winamp, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.15%, the 92nd percentile. No source names a fixed version.

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Exploit likelihood

5.15%Down 2.4 points since Feb 4, 2022

What each source reports

NVD Score used 7.6

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Record: CVE-2004-1896
CVSS 2.0: 7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Record: CVE-2004-1896
Updated: 2026-11-02

EUVDEUVD-2004-1889 No score

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Record: EUVD-2004-1889
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v8rp-6wh5-2p3m No score

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote...

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

Record: GHSA-v8rp-6wh5-2p3m
Updated: 2026-11-02

Affected products

nullsoft winamp

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References