GCVE - cpe:2.3:a:nullsoft:winamp:5.572:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.572:*:*:*:*:*:*:*

part: a version: 5.572 update: *

Vendor	Nullsoft (`b6c4ca26-d59a-58af-acde-0a73d8b38fb7`)
Product	Winamp (`41a4eba7-753d-56df-8b19-46ce745b0307`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3442`	vulnerable	2026-06-08 05:05:32.693252	Details available Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s. Published: 2014-05-23T14:00:00.000Z Updated: 2024-08-06T10:43:06.142Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/93173 http://packetstormsecurity.com/files/126636 http://www.securityfocus.com/bid/67429	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4694`	vulnerable	2026-06-08 05:04:49.255455	Details available Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk. Published: 2014-04-16T22:00:00.000Z Updated: 2024-08-06T16:52:27.127Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2013/Jul/4 http://www.exploit-db.com/exploits/26558 http://forums.winamp.com/showthread.php?t=364291 https://exchange.xforce.ibmcloud.com/vulnerabilities/85399 http://osvdb.org/94739	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3890`	vulnerable	2026-06-08 05:02:14.140856	Details available The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file. Published: 2012-07-11T10:00:00.000Z Updated: 2024-08-06T20:21:03.873Z Open on db.gcve.eu Reference links http://forums.winamp.com/showthread.php?t=345684 http://secunia.com/advisories/46624 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15553 http://www.securityfocus.com/bid/54131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3889`	vulnerable	2026-06-08 05:02:14.138592	Details available The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file. Published: 2012-07-11T10:00:00.000Z Updated: 2024-08-06T20:21:04.047Z Open on db.gcve.eu Reference links http://forums.winamp.com/showthread.php?t=345684 http://secunia.com/advisories/46624 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14748 http://www.securityfocus.com/bid/54131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4857`	vulnerable	2026-06-08 04:59:33.263039	Details available Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file. NOTE: some of these details are obtained from third party information. Published: 2011-12-16T19:00:00.000Z Updated: 2024-08-07T00:16:34.969Z Open on db.gcve.eu Reference links http://forums.winamp.com/showthread.php?t=332010 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15351 https://exchange.xforce.ibmcloud.com/vulnerabilities/72054 http://secunia.com/advisories/46882	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3834`	vulnerable	2026-06-08 04:59:27.956589	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4374`	vulnerable	2026-06-08 04:56:27.487881	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4373`	vulnerable	2026-06-08 04:56:27.483876	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4372`	vulnerable	2026-06-08 04:56:27.481767	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4371`	vulnerable	2026-06-08 04:56:27.479017	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4370`	vulnerable	2026-06-08 04:56:27.476796	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2586`	vulnerable	2026-06-08 04:55:08.941521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1523`	vulnerable	2026-06-08 04:54:08.880135	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.