CVE-2006-0476
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a...
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
CVE-2006-0476- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
CVE-2006-0476- Updated
- 2026-11-02
EUVDEUVD-2006-0483 No score
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
EUVD-2006-0483- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv33-3xgx-xjg2 No score
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a...
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
GHSA-jv33-3xgx-xjg2- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Winamp 5.12 - '.pls' Remote Buffer Overflow (1) | 2006-01-29 |
| Exploit-DB | Winamp 5.12 - '.pls' Remote Buffer Overflow (Metasploit) | 2006-01-31 |
| Exploit-DB | Winamp - Playlist UNC Path Computer Name Overflow (Metasploit) | 2010-04-30 |
| Exploit-DB | Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2) | 2007-03-07 |
| Metasploit | Winamp Playlist UNC Path Computer Name Overflow | 2006-01-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0476 is a high vulnerability (CVSS 7.6) in Nullsoft Winamp, published January 31, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 75.0%, the 99th percentile. No source names a fixed version.
References
securityreason.com/securityalert/398
exchange.xforce.ibmcloud.com/vulnerabilities/24361
securitytracker.com/id?1015552
exploit-db.com/exploits/3422
secunia.com/advisories/18649
Show 12 moreShow less
heise.de/newsticker/meldung/68981
vupen.com/english/advisories/2006/0361
securityfocus.com/archive/1/423548/100/0/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402
winamp.com/player/version_history.php
osvdb.org/22789
us-cert.gov/cas/techalerts/TA06-032A.html
kb.cert.org/vuls/id/604745
nvd.nist.gov/vuln/detail/CVE-2006-0476
github.com/advisories/GHSA-jv33-3xgx-xjg2