Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.3:*:*:*:*:*:*:*

part: a version: 5.3 update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductWinamp (41a4eba7-753d-56df-8b19-46ce745b0307)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3442 vulnerable 2026-06-08 05:05:32.666913 Details available
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Published: 2014-05-23T14:00:00.000Z
Updated: 2024-08-06T10:43:06.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4694 vulnerable 2026-06-08 05:04:49.229690 Details available
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
Published: 2014-04-16T22:00:00.000Z
Updated: 2024-08-06T16:52:27.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3890 vulnerable 2026-06-08 05:02:14.140167 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:03.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3889 vulnerable 2026-06-08 05:02:14.112900 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:04.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4857 vulnerable 2026-06-08 04:59:33.262317 Details available
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Published: 2011-12-16T19:00:00.000Z
Updated: 2024-08-07T00:16:34.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3834 vulnerable 2026-06-08 04:59:27.933244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4374 vulnerable 2026-06-08 04:56:27.486068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4373 vulnerable 2026-06-08 04:56:27.482887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4372 vulnerable 2026-06-08 04:56:27.480342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4371 vulnerable 2026-06-08 04:56:27.478171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4370 vulnerable 2026-06-08 04:56:27.449376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2586 vulnerable 2026-06-08 04:55:08.910281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1523 vulnerable 2026-06-08 04:54:08.853295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4356 vulnerable 2026-06-08 04:51:48.186923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3997 vulnerable 2026-06-08 04:51:45.934360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3996 vulnerable 2026-06-08 04:51:45.931883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3995 vulnerable 2026-06-08 04:51:45.908289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1831 vulnerable 2026-06-08 04:51:25.047746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0263 vulnerable 2026-06-08 04:51:08.598392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3567 vulnerable 2026-06-08 04:50:35.357663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2498 vulnerable 2026-06-08 04:49:45.104863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2180 vulnerable 2026-06-08 04:49:44.270950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5567 vulnerable 2026-06-08 04:49:20.820171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.