Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*

part: a version: 5.08c update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductWinamp (41a4eba7-753d-56df-8b19-46ce745b0307)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3442 vulnerable 2026-06-08 05:05:32.670845 Details available
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Published: 2014-05-23T14:00:00.000Z
Updated: 2024-08-06T10:43:06.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4694 vulnerable 2026-06-08 05:04:49.233605 Details available
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
Published: 2014-04-16T22:00:00.000Z
Updated: 2024-08-06T16:52:27.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3890 vulnerable 2026-06-08 05:02:14.140278 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:03.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3889 vulnerable 2026-06-08 05:02:14.117016 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:04.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4857 vulnerable 2026-06-08 04:59:33.262466 Details available
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Published: 2011-12-16T19:00:00.000Z
Updated: 2024-08-07T00:16:34.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3834 vulnerable 2026-06-08 04:59:27.937922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4374 vulnerable 2026-06-08 04:56:27.486474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4373 vulnerable 2026-06-08 04:56:27.483067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4372 vulnerable 2026-06-08 04:56:27.480551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4371 vulnerable 2026-06-08 04:56:27.478284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4370 vulnerable 2026-06-08 04:56:27.454052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2586 vulnerable 2026-06-08 04:55:08.916020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1523 vulnerable 2026-06-08 04:54:08.860272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4356 vulnerable 2026-06-08 04:51:48.187136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3997 vulnerable 2026-06-08 04:51:45.934557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3996 vulnerable 2026-06-08 04:51:45.932088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3995 vulnerable 2026-06-08 04:51:45.914349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1831 vulnerable 2026-06-08 04:51:25.053633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0263 vulnerable 2026-06-08 04:51:08.605425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3567 vulnerable 2026-06-08 04:50:35.362927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3228 vulnerable 2026-06-08 04:49:08.601076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0708 vulnerable 2026-06-08 04:48:55.011487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1150 vulnerable 2026-06-08 04:47:53.111584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.