Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.541:*:*:*:*:*:*:*

part: a version: 5.541 update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductWinamp (41a4eba7-753d-56df-8b19-46ce745b0307)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3442 vulnerable 2026-06-08 05:05:32.691541 Details available
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Published: 2014-05-23T14:00:00.000Z
Updated: 2024-08-06T10:43:06.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4694 vulnerable 2026-06-08 05:04:49.253627 Details available
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
Published: 2014-04-16T22:00:00.000Z
Updated: 2024-08-06T16:52:27.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3890 vulnerable 2026-06-08 05:02:14.140840 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:03.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3889 vulnerable 2026-06-08 05:02:14.138012 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:04.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4857 vulnerable 2026-06-08 04:59:33.262984 Details available
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Published: 2011-12-16T19:00:00.000Z
Updated: 2024-08-07T00:16:34.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3834 vulnerable 2026-06-08 04:59:27.955009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4374 vulnerable 2026-06-08 04:56:27.487831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4373 vulnerable 2026-06-08 04:56:27.483823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4372 vulnerable 2026-06-08 04:56:27.481623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4371 vulnerable 2026-06-08 04:56:27.478968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4370 vulnerable 2026-06-08 04:56:27.474512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2586 vulnerable 2026-06-08 04:55:08.939247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1523 vulnerable 2026-06-08 04:54:08.878235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4356 vulnerable 2026-06-08 04:51:48.187606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3997 vulnerable 2026-06-08 04:51:45.935013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3996 vulnerable 2026-06-08 04:51:45.932548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3995 vulnerable 2026-06-08 04:51:45.928117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1831 vulnerable 2026-06-08 04:51:25.065296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1791 vulnerable 2026-06-08 04:51:24.885201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1788 vulnerable 2026-06-08 04:51:24.851375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0833 not_vulnerable 2026-06-08 04:51:11.557528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0186 vulnerable 2026-06-08 04:51:08.177229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.