CVE-2006-0476
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a...
CVE-2006-0476 is a high vulnerability (CVSS 7.6) in Nullsoft Winamp, published January 31, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 75.0%, the 99th percentile. No source names a fixed version.
- Severity
- 7.6 HighCVSS 2.0, NVD
- Exploit chance
- 75.0%EPSS, 99th percentile
- Exploitation
- None known5 public exploits
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Winamp 5.12 - '.pls' Remote Buffer Overflow (1) | 2006-01-29 |
| Metasploit | Winamp Playlist UNC Path Computer Name Overflow | 2006-01-29 |
| Exploit-DB | Winamp 5.12 - '.pls' Remote Buffer Overflow (Metasploit) | 2006-01-31 |
| Exploit-DB | Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2) | 2007-03-07 |
| Exploit-DB | Winamp - Playlist UNC Path Computer Name Overflow (Metasploit) | 2010-04-30 |
What each source reports
NVD Score used
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
CVE-2006-0476- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
CVE-2006-0476- Updated
- 2026-11-02
EUVDEUVD-2006-0483No score
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
EUVD-2006-0483- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv33-3xgx-xjg2No score
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a...
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
- Record
GHSA-jv33-3xgx-xjg2- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityreason.com/securityalert/398
exchange.xforce.ibmcloud.com/vulnerabilities/24361
securitytracker.com/id?1015552
exploit-db.com/exploits/3422
secunia.com/advisories/18649
Show 12 moreShow less
heise.de/newsticker/meldung/68981
vupen.com/english/advisories/2006/0361
securityfocus.com/archive/1/423548/100/0/threaded
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402
winamp.com/player/version_history.php
osvdb.org/22789
us-cert.gov/cas/techalerts/TA06-032A.html
kb.cert.org/vuls/id/604745
nvd.nist.gov/vuln/detail/CVE-2006-0476
github.com/advisories/GHSA-jv33-3xgx-xjg2