Nullsoft vulnerabilities

Products

• Winamp 61
• Shoutcast Server 10
• Scriptable Install System 4
• Scriptable Install System 2

Newest

• nullsoft scriptable install system NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp... CVE-2026-42171 Fix available 7.8 HighApril 24, 2026
• nullsoft scriptable install system, siemens simatic technology package tpcamgen, simotion oa miif +3 more +5 more Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate... CVE-2025-43715 Fix available 8.1 HighApril 17, 2025
• nullsoft scriptable install system Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an... CVE-2023-37378 Fix available 5.3 MediumJuly 3, 2023
• nullsoft scriptable install system, debian linux +1 more Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version... CVE-2015-9268 Fix available 7.8 HighOctober 1, 2018
• nullsoft scriptable install system, debian linux +1 more Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow... CVE-2015-9267 Fix available 5.5 MediumOctober 1, 2018
• nullsoft winamp Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption... CVE-2014-3442 Public exploit 4.3 MediumMay 23, 2014
• nullsoft winamp Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote... CVE-2013-4694 Public exploit EPSS 17.2% 7.5 HighApril 16, 2014
• nullsoft winamp Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote... CVE-2012-4045 7.5 HighJuly 22, 2012
• nullsoft winamp The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service ... CVE-2012-3890 6.8 MediumJuly 11, 2012
• nullsoft winamp The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service ... CVE-2012-3889 6.8 MediumJuly 11, 2012
• nullsoft winamp Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote... CVE-2011-4857 10.0 HighDecember 16, 2011
• nullsoft winamp Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers... CVE-2011-3834 9.3 HighDecember 16, 2011
• nullsoft winamp The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service ... CVE-2010-4374 4.3 MediumDecember 2, 2010
• nullsoft winamp The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service ... CVE-2010-4373 4.3 MediumDecember 2, 2010
• nullsoft winamp Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an... CVE-2010-4372 9.3 HighDecember 2, 2010
• nullsoft winamp Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an... CVE-2010-4371 Public exploit 9.3 HighDecember 2, 2010
• nullsoft winamp Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to... CVE-2010-4370 9.3 HighDecember 2, 2010
• nullsoft winamp Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote... CVE-2010-2586 9.3 HighDecember 2, 2010
• nullsoft winamp Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta... CVE-2010-1523 9.3 HighNovember 5, 2010
• nullsoft winamp Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows... CVE-2010-3137 Public exploit 9.3 HighAugust 26, 2010
• nullsoft winamp Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote... CVE-2009-4356 9.3 HighDecember 18, 2009
• nullsoft winamp, raphael assenat libmikmod +1 more Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57,... CVE-2009-3996 Fix available 9.3 HighDecember 18, 2009
• nullsoft winamp Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow... CVE-2009-3997 9.3 HighDecember 18, 2009
• nullsoft winamp, raphael assenat libmikmod +1 more Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp... CVE-2009-3995 Fix available 9.3 HighDecember 18, 2009
• nullsoft winamp The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows... CVE-2009-1831 Public exploit EPSS 36.3% 9.3 HighMay 29, 2009
• mega-nerd libsndfile, nullsoft winamp +1 more Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in... CVE-2009-1791 Fix available 9.3 HighMay 26, 2009
• mega-nerd libsndfile, nullsoft winamp +1 more Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in... CVE-2009-1788 Fix available 9.3 HighMay 26, 2009
• mega-nerd libsndfile, nullsoft winamp +1 more Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context... CVE-2009-0186 Fix available 9.3 HighMarch 5, 2009
• nullsoft winamp Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of... CVE-2009-0263 Public exploit EPSS 16.7% 10.0 HighJanuary 23, 2009
• nullsoft winamp Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5... CVE-2008-3567 4.3 MediumAugust 10, 2008
• nullsoft winamp Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows... CVE-2008-3441 7.5 HighAugust 1, 2008
• flac libflac, nullsoft winamp +1 more Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in... CVE-2007-4619 Fix available 9.3 HighOctober 12, 2007
• nullsoft winamp Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and... CVE-2007-4392 4.3 MediumAugust 17, 2007
• nullsoft winamp libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute... CVE-2007-2498 Public exploit EPSS 10.2% 9.3 HighMay 4, 2007
• nullsoft winamp Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of... CVE-2007-2180 Public exploit 7.1 HighApril 24, 2007
• nullsoft winamp The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5... CVE-2007-1922 9.3 HighApril 10, 2007
• nullsoft winamp LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote... CVE-2007-1921 9.3 HighApril 10, 2007
• nullsoft shoutcast server Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote... CVE-2007-1229 Public exploit 4.3 MediumMarch 2, 2007
• nullsoft winamp Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted... CVE-2006-5567 Public exploit EPSS 14.5% 9.3 HighOctober 27, 2006
• nullsoft shoutcast dsp Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.7 allows remote attackers... CVE-2006-3535 5.0 MediumJuly 12, 2006
• nullsoft shoutcast server Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory... CVE-2006-3534 7.8 HighJuly 12, 2006
• nullsoft winamp Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote... CVE-2006-3228 Public exploit EPSS 11.7% 9.3 HighJune 26, 2006
• nullsoft shoutcast server Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to... CVE-2006-3007 4.3 MediumJune 13, 2006
• nullsoft winamp Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to... CVE-2006-0720 Public exploit EPSS 10.5% 7.6 HighFebruary 23, 2006
• nullsoft winamp Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute... CVE-2006-0708 9.3 HighFebruary 15, 2006
• nullsoft winamp Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a... CVE-2006-0476 Public exploit EPSS 75.0% 7.6 HighJanuary 31, 2006
• nullsoft winamp Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1... CVE-2005-3188 7.6 HighDecember 31, 2005
• nullsoft winamp Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote... CVE-2005-2310 Public exploit EPSS 13.1% 9.3 HighJuly 19, 2005
• nullsoft winamp NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a... CVE-2004-2384 5.0 MediumDecember 31, 2004
• nullsoft winamp Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote... CVE-2004-1896 7.6 HighDecember 31, 2004
• Show olderLoading…