GCVE - cpe:2.3:a:nullsoft:winamp:5.61:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:winamp:5.61:*:*:*:*:*:*:*

part: a version: 5.61 update: *

Vendor	Nullsoft (`b6c4ca26-d59a-58af-acde-0a73d8b38fb7`)
Product	Winamp (`41a4eba7-753d-56df-8b19-46ce745b0307`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3442`	vulnerable	2026-06-08 05:05:32.687396	Details available Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s. Published: 2014-05-23T14:00:00.000Z Updated: 2024-08-06T10:43:06.142Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/93173 http://packetstormsecurity.com/files/126636 http://www.securityfocus.com/bid/67429	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4694`	vulnerable	2026-06-08 05:04:49.250102	Details available Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk. Published: 2014-04-16T22:00:00.000Z Updated: 2024-08-06T16:52:27.127Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2013/Jul/4 http://www.exploit-db.com/exploits/26558 http://forums.winamp.com/showthread.php?t=364291 https://exchange.xforce.ibmcloud.com/vulnerabilities/85399 http://osvdb.org/94739	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3890`	vulnerable	2026-06-08 05:02:14.140727	Details available The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file. Published: 2012-07-11T10:00:00.000Z Updated: 2024-08-06T20:21:03.873Z Open on db.gcve.eu Reference links http://forums.winamp.com/showthread.php?t=345684 http://secunia.com/advisories/46624 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15553 http://www.securityfocus.com/bid/54131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3889`	vulnerable	2026-06-08 05:02:14.133831	Details available The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file. Published: 2012-07-11T10:00:00.000Z Updated: 2024-08-06T20:21:04.047Z Open on db.gcve.eu Reference links http://forums.winamp.com/showthread.php?t=345684 http://secunia.com/advisories/46624 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14748 http://www.securityfocus.com/bid/54131	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.