Vulnerability Details CVE-2007-2498
libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.089
EPSS Ranking 92.2%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/25089
- http://securitytracker.com/id?1017993
- http://www.securityfocus.com/bid/23723
- http://www.vupen.com/english/advisories/2007/1594
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34030
- https://www.exploit-db.com/exploits/3823
- http://secunia.com/advisories/25089
- http://securitytracker.com/id?1017993
- http://www.securityfocus.com/bid/23723
- http://www.vupen.com/english/advisories/2007/1594
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34030
- https://www.exploit-db.com/exploits/3823
Products affected by CVE-2007-2498
-
cpe:2.3:a:nullsoft:winamp:5.2
-
cpe:2.3:a:nullsoft:winamp:5.21
-
cpe:2.3:a:nullsoft:winamp:5.22
-
cpe:2.3:a:nullsoft:winamp:5.23
-
cpe:2.3:a:nullsoft:winamp:5.24
-
cpe:2.3:a:nullsoft:winamp:5.3
-
cpe:2.3:a:nullsoft:winamp:5.31
-
cpe:2.3:a:nullsoft:winamp:5.32
-
cpe:2.3:a:nullsoft:winamp:5.33
-
cpe:2.3:a:nullsoft:winamp:5.34