Vulnerability Details CVE-2011-3834
Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.072
EPSS Ranking 91.1%
CVSS Severity
CVSS v2 Score 9.3
References
- http://forums.winamp.com/showthread.php?t=332010
- http://secunia.com/advisories/46882
- http://secunia.com/secunia_research/2011-81/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14981
- http://forums.winamp.com/showthread.php?t=332010
- http://secunia.com/advisories/46882
- http://secunia.com/secunia_research/2011-81/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14981
Products affected by CVE-2011-3834
-
cpe:2.3:a:nullsoft:winamp:0.20a
-
cpe:2.3:a:nullsoft:winamp:0.92
-
cpe:2.3:a:nullsoft:winamp:1.006
-
cpe:2.3:a:nullsoft:winamp:1.90
-
cpe:2.3:a:nullsoft:winamp:2.0
-
cpe:2.3:a:nullsoft:winamp:2.10
-
cpe:2.3:a:nullsoft:winamp:2.6
-
cpe:2.3:a:nullsoft:winamp:2.9
-
cpe:2.3:a:nullsoft:winamp:2.91
-
cpe:2.3:a:nullsoft:winamp:2.92
-
cpe:2.3:a:nullsoft:winamp:2.95
-
cpe:2.3:a:nullsoft:winamp:5.0
-
cpe:2.3:a:nullsoft:winamp:5.01
-
cpe:2.3:a:nullsoft:winamp:5.02
-
cpe:2.3:a:nullsoft:winamp:5.03
-
cpe:2.3:a:nullsoft:winamp:5.04
-
cpe:2.3:a:nullsoft:winamp:5.05
-
cpe:2.3:a:nullsoft:winamp:5.06
-
cpe:2.3:a:nullsoft:winamp:5.07
-
cpe:2.3:a:nullsoft:winamp:5.08c
-
cpe:2.3:a:nullsoft:winamp:5.08d
-
cpe:2.3:a:nullsoft:winamp:5.08e
-
cpe:2.3:a:nullsoft:winamp:5.09
-
cpe:2.3:a:nullsoft:winamp:5.091
-
cpe:2.3:a:nullsoft:winamp:5.093
-
cpe:2.3:a:nullsoft:winamp:5.094
-
cpe:2.3:a:nullsoft:winamp:5.1
-
cpe:2.3:a:nullsoft:winamp:5.11
-
cpe:2.3:a:nullsoft:winamp:5.111
-
cpe:2.3:a:nullsoft:winamp:5.112
-
cpe:2.3:a:nullsoft:winamp:5.12
-
cpe:2.3:a:nullsoft:winamp:5.13
-
cpe:2.3:a:nullsoft:winamp:5.2
-
cpe:2.3:a:nullsoft:winamp:5.21
-
cpe:2.3:a:nullsoft:winamp:5.22
-
cpe:2.3:a:nullsoft:winamp:5.23
-
cpe:2.3:a:nullsoft:winamp:5.24
-
cpe:2.3:a:nullsoft:winamp:5.3
-
cpe:2.3:a:nullsoft:winamp:5.31
-
cpe:2.3:a:nullsoft:winamp:5.32
-
cpe:2.3:a:nullsoft:winamp:5.33
-
cpe:2.3:a:nullsoft:winamp:5.34
-
cpe:2.3:a:nullsoft:winamp:5.35
-
cpe:2.3:a:nullsoft:winamp:5.36
-
cpe:2.3:a:nullsoft:winamp:5.5
-
cpe:2.3:a:nullsoft:winamp:5.51
-
cpe:2.3:a:nullsoft:winamp:5.52
-
cpe:2.3:a:nullsoft:winamp:5.53
-
cpe:2.3:a:nullsoft:winamp:5.531
-
cpe:2.3:a:nullsoft:winamp:5.54
-
cpe:2.3:a:nullsoft:winamp:5.541
-
cpe:2.3:a:nullsoft:winamp:5.55
-
cpe:2.3:a:nullsoft:winamp:5.551
-
cpe:2.3:a:nullsoft:winamp:5.552
-
cpe:2.3:a:nullsoft:winamp:5.56
-
cpe:2.3:a:nullsoft:winamp:5.57
-
cpe:2.3:a:nullsoft:winamp:5.572
-
cpe:2.3:a:nullsoft:winamp:5.58
-
cpe:2.3:a:nullsoft:winamp:5.581
-
cpe:2.3:a:nullsoft:winamp:5.59
-
cpe:2.3:a:nullsoft:winamp:5.6
-
cpe:2.3:a:nullsoft:winamp:5.61
-
cpe:2.3:a:nullsoft:winamp:5.63