Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.2:*:*:*:*:*:*:*

part: a version: 5.2 update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductWinamp (41a4eba7-753d-56df-8b19-46ce745b0307)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3442 vulnerable 2026-06-08 05:05:32.666379 Details available
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Published: 2014-05-23T14:00:00.000Z
Updated: 2024-08-06T10:43:06.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4694 vulnerable 2026-06-08 05:04:49.229170 Details available
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
Published: 2014-04-16T22:00:00.000Z
Updated: 2024-08-06T16:52:27.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3890 vulnerable 2026-06-08 05:02:14.140145 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:03.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3889 vulnerable 2026-06-08 05:02:14.111981 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:04.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4857 vulnerable 2026-06-08 04:59:33.262225 Details available
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Published: 2011-12-16T19:00:00.000Z
Updated: 2024-08-07T00:16:34.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3834 vulnerable 2026-06-08 04:59:27.932615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4374 vulnerable 2026-06-08 04:56:27.486050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4373 vulnerable 2026-06-08 04:56:27.482870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4372 vulnerable 2026-06-08 04:56:27.480325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4371 vulnerable 2026-06-08 04:56:27.478154 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4370 vulnerable 2026-06-08 04:56:27.448725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2586 vulnerable 2026-06-08 04:55:08.909636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1523 vulnerable 2026-06-08 04:54:08.852555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4356 vulnerable 2026-06-08 04:51:48.186905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3997 vulnerable 2026-06-08 04:51:45.934338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3996 vulnerable 2026-06-08 04:51:45.931863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3995 vulnerable 2026-06-08 04:51:45.907817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1831 vulnerable 2026-06-08 04:51:25.047191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0263 vulnerable 2026-06-08 04:51:08.597870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3567 vulnerable 2026-06-08 04:50:35.356981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2498 vulnerable 2026-06-08 04:49:45.104817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3228 vulnerable 2026-06-08 04:49:08.597306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.