Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.52:*:*:*:*:*:*:*

part: a version: 5.52 update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductWinamp (41a4eba7-753d-56df-8b19-46ce745b0307)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3442 vulnerable 2026-06-08 05:05:32.681804 Details available
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Published: 2014-05-23T14:00:00.000Z
Updated: 2024-08-06T10:43:06.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4694 vulnerable 2026-06-08 05:04:49.244412 Details available
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.
Published: 2014-04-16T22:00:00.000Z
Updated: 2024-08-06T16:52:27.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3890 vulnerable 2026-06-08 05:02:14.140583 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:03.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3889 vulnerable 2026-06-08 05:02:14.128437 Details available
The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
Published: 2012-07-11T10:00:00.000Z
Updated: 2024-08-06T20:21:04.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4857 vulnerable 2026-06-08 04:59:33.262754 Details available
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information.
Published: 2011-12-16T19:00:00.000Z
Updated: 2024-08-07T00:16:34.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3834 vulnerable 2026-06-08 04:59:27.947313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4374 vulnerable 2026-06-08 04:56:27.487537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4373 vulnerable 2026-06-08 04:56:27.483436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4372 vulnerable 2026-06-08 04:56:27.481014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4371 vulnerable 2026-06-08 04:56:27.478670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4370 vulnerable 2026-06-08 04:56:27.465473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2586 vulnerable 2026-06-08 04:55:08.928919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1523 vulnerable 2026-06-08 04:54:08.869982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4356 vulnerable 2026-06-08 04:51:48.187437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3997 vulnerable 2026-06-08 04:51:45.934850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3996 vulnerable 2026-06-08 04:51:45.932386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3995 vulnerable 2026-06-08 04:51:45.923261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1831 vulnerable 2026-06-08 04:51:25.061579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1791 vulnerable 2026-06-08 04:51:24.885146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1788 vulnerable 2026-06-08 04:51:24.849911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0263 vulnerable 2026-06-08 04:51:08.614316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3567 vulnerable 2026-06-08 04:50:35.371474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.