Skip to content

Nullsoft vulnerabilities

Products

Newest

nullsoft winampWinamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service ...CVE-2004-13962.6 LowDecember 31, 2004
nullsoft winampStack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows...CVE-2004-1150Public exploit5.1 MediumDecember 31, 2004
nullsoft shoutcast serverFormat string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of...CVE-2004-1373Public exploitEPSS 70.1%7.5 HighDecember 23, 2004
nullsoft winampStack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including...CVE-2004-1119Public exploitEPSS 17.3%10.0 HighDecember 1, 2004
nullsoft winampWinamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer...CVE-2004-0820Public exploit4.6 MediumAugust 28, 2004
nullsoft winampWinamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file...CVE-2003-12745.0 MediumDecember 31, 2003
nullsoft winampWinamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a...CVE-2003-12732.1 LowDecember 31, 2003
nullsoft winampMultiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service ...CVE-2003-12729.3 HighDecember 31, 2003
nullsoft shoutcast serverBuffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of...CVE-2003-1174Public exploit2.1 LowDecember 31, 2003
nullsoft winampThe IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to...CVE-2003-0765Public exploit7.5 HighSeptember 12, 2003
nullsoft winampBuffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to...CVE-2002-15247.5 HighApril 2, 2003
nullsoft shoutcast serverSHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password...CVE-2002-14702.1 LowMarch 18, 2003
nullsoft winampWinamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp...CVE-2002-24122.1 LowDecember 31, 2002
nullsoft winampWinamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote...CVE-2002-23926.4 MediumDecember 31, 2002
nullsoft winampBuffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers...CVE-2002-2195Public exploit5.0 MediumDecember 31, 2002
nullsoft winampMultiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window,...CVE-2002-11777.5 HighDecember 20, 2002
nullsoft winampBuffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long...CVE-2002-11767.5 HighDecember 20, 2002
nullsoft shoutcast serverBuffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated...CVE-2002-0907Public exploit7.5 HighAugust 31, 2002
nullsoft winampCross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote...CVE-2002-05467.5 HighJuly 3, 2002
nullsoft winampBuffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause...CVE-2002-05477.5 HighJune 11, 2002
nullsoft winampWinamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the...CVE-2002-02842.6 LowMay 3, 2002
nullsoft shoutcast serverBuffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause...CVE-2002-01997.5 HighMay 3, 2002
nullsoft shoutcast serverBuffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service ...CVE-2001-13045.0 MediumAugust 3, 2001
nullsoft winampBuffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long...CVE-2001-0490Public exploit7.5 HighMay 24, 2001
nullsoft winampBuffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands...CVE-2000-0624Public exploit7.5 HighJuly 20, 2000
nullsoft winampBuffer overflow in Winamp client allows remote attackers to execute commands via a long entry in...CVE-2000-0049Public exploit7.2 HighJanuary 4, 2000
nullsoft shoutcast serverNullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file...CVE-1999-15617.2 HighAugust 20, 1999