GCVE - cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.36:*:*:*:*:*:*:*

part: a version: 5.36 update: *

Vendor	Nullsoft (`b6c4ca26-d59a-58af-acde-0a73d8b38fb7`)
Product	Winamp (`41a4eba7-753d-56df-8b19-46ce745b0307`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3442`	vulnerable	2026-06-08 05:05:32.680108	Details available Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s. Published: 2014-05-23T14:00:00.000Z Updated: 2024-08-06T10:43:06.142Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/93173 http://packetstormsecurity.com/files/126636 http://www.securityfocus.com/bid/67429	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4694`	vulnerable	2026-06-08 05:04:49.242456	Details available Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk. Published: 2014-04-16T22:00:00.000Z Updated: 2024-08-06T16:52:27.127Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2013/Jul/4 http://www.exploit-db.com/exploits/26558 http://forums.winamp.com/showthread.php?t=364291 https://exchange.xforce.ibmcloud.com/vulnerabilities/85399 http://osvdb.org/94739	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3890`	vulnerable	2026-06-08 05:02:14.140535	Details available The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file. Published: 2012-07-11T10:00:00.000Z Updated: 2024-08-06T20:21:03.873Z Open on db.gcve.eu Reference links http://forums.winamp.com/showthread.php?t=345684 http://secunia.com/advisories/46624 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15553 http://www.securityfocus.com/bid/54131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3889`	vulnerable	2026-06-08 05:02:14.126693	Details available The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file. Published: 2012-07-11T10:00:00.000Z Updated: 2024-08-06T20:21:04.047Z Open on db.gcve.eu Reference links http://forums.winamp.com/showthread.php?t=345684 http://secunia.com/advisories/46624 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14748 http://www.securityfocus.com/bid/54131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1523`	vulnerable	2026-06-08 04:54:08.868996	Details available Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2) video stream. Published: 2010-11-05T22:00:00.000Z Updated: 2024-08-07T01:28:41.811Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/44466 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12056 http://www.securityfocus.com/archive/1/514484/100/0/threaded http://secunia.com/secunia_research/2010-95/ http://forums.winamp.com/showthread.php?t=322995	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4356`	vulnerable	2026-06-08 04:51:48.187402	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3997`	vulnerable	2026-06-08 04:51:45.934816	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3996`	vulnerable	2026-06-08 04:51:45.932353	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3995`	vulnerable	2026-06-08 04:51:45.922316	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1831`	vulnerable	2026-06-08 04:51:25.061513	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0263`	vulnerable	2026-06-08 04:51:08.613358	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3567`	vulnerable	2026-06-08 04:50:35.370512	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.