Skip to content

CVE-2007-4392

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and...

4.3 Medium

CVE-2007-4392 is a medium vulnerability (CVSS 4.3) in Nullsoft Winamp, published August 17, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. No source names a fixed version.

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Exploit likelihood

1.63%Up 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Record: CVE-2007-4392
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Record: CVE-2007-4392
Updated: 2026-11-02

EUVDEUVD-2007-4375 No score

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Record: EUVD-2007-4375
Updated: 2026-11-03

GitHub AdvisoriesGHSA-58cp-3pw7-4vrf No score

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and...

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Record: GHSA-58cp-3pw7-4vrf
Updated: 2026-11-02

Affected products

nullsoft winamp

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	aliases, references, title	GitHub Advisories
2026-11-02	created	CVE List, NVD

References