Skip to content
Noroxi

Nullsoft records

77 published records for vendor Nullsoft. 0 of them have been exploited in the wild (listed in CISA KEV) and 3 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 3.9%
Pre-auth RCE
46
With a fix record
13%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 18
  2. 23
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

77 records
  • CVE-2006-0476
    52Plan

    Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (F

    HighCVSS 7.6WeaponizedEPSS 74%

    nullsoft · winampJan 31, 2006

  • CVE-2004-1373
    51Plan

    Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrar

    HighCVSS 7.5WeaponizedEPSS 70%

    nullsoft · shoutcast serverDec 23, 2004

  • CVE-2009-1831
    48Plan

    The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via

    CriticalCVSS 9.3WeaponizedEPSS 36%

    nullsoft · winampMay 29, 2009

  • CVE-2004-1119
    45Plan

    Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute ar

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    nullsoft · winampJan 10, 2005

  • CVE-2009-0263
    45Plan

    Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary cod

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    nullsoft · winampJan 23, 2009

  • CVE-2006-5567
    41Plan

    Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a

    CriticalCVSS 9.3Proof of conceptEPSS 14%

    nullsoft · winampOct 27, 2006

  • CVE-2005-2310
    41Plan

    Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an M

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    nullsoft · winampJul 19, 2005

  • CVE-2006-3228
    41Plan

    Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    nullsoft · winampJun 26, 2006

  • CVE-2011-4857
    41Plan

    Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted son

    CriticalCVSS 10.0No exploitEPSS 4%

    nullsoft · winampDec 16, 2011

  • CVE-2007-2498
    40Plan

    libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file.

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    nullsoft · winampMay 3, 2007

  • CVE-2009-0833
    40Plan

    Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execute arbitrary code via

    CriticalCVSS 9.3Proof of conceptEPSS 9%

    myplugins · gen msnMar 5, 2009

  • CVE-2009-1788
    39Monitor

    Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs

    CriticalCVSS 9.3No exploitEPSS 8%

    mega-nerd · libsndfileMay 26, 2009

  • CVE-2010-3137
    39Monitor

    Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers

    CriticalCVSS 9.3Proof of conceptEPSS 7%

    nullsoft · winampAug 26, 2010

  • CVE-2006-0708
    39Monitor

    Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containin

    CriticalCVSS 9.3No exploitEPSS 7%

    nullsoft · winampFeb 15, 2006

  • CVE-2007-4619
    39Monitor

    Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow

    CriticalCVSS 9.3No exploitEPSS 6%

    flac · libflacOct 12, 2007

  • CVE-2009-3995
    39Monitor

    Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow

    CriticalCVSS 9.3No exploitEPSS 6%

    nullsoft · winampDec 18, 2009

  • CVE-2009-1791
    39Monitor

    Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media program

    CriticalCVSS 9.3No exploitEPSS 6%

    mega-nerd · libsndfileMay 26, 2009

  • CVE-2009-3996
    39Monitor

    Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote at

    CriticalCVSS 9.3No exploitEPSS 6%

    nullsoft · winampDec 18, 2009

  • CVE-2010-4371
    39Monitor

    Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the c

    CriticalCVSS 9.3Proof of conceptEPSS 5%

    nullsoft · winampDec 2, 2010

  • CVE-2009-3997
    39Monitor

    Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code

    CriticalCVSS 9.3No exploitEPSS 5%

    nullsoft · winampDec 18, 2009

  • CVE-2010-2586
    39Monitor

    Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a cr

    CriticalCVSS 9.3No exploitEPSS 5%

    nullsoft · winampDec 2, 2010

  • CVE-2010-1523
    39Monitor

    Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to ex

    CriticalCVSS 9.3No exploitEPSS 5%

    nullsoft · winampNov 5, 2010

  • CVE-2011-3834
    39Monitor

    Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file

    CriticalCVSS 9.3No exploitEPSS 5%

    nullsoft · winampDec 16, 2011

  • CVE-2010-4370
    38Monitor

    Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI fi

    CriticalCVSS 9.3No exploitEPSS 4%

    nullsoft · winampDec 2, 2010

  • CVE-2009-4356
    38Monitor

    Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via ma

    CriticalCVSS 9.3No exploitEPSS 4%

    nullsoft · winampDec 18, 2009