Записи Nullsoft
77 опубликованных записей вендора nullsoft.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 3 · 3,9 %
- Pre-auth RCE
- 46
- С записью об исправлении
- 13 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer15
- CWE-189 Numeric Errors9
- CWE-20 Improper Input Validation2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-427 Uncontrolled Search Path Element1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
77 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
52В плане | CVE-2006-0476Готовый эксплойт | Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (Fnullsoft · winamp | Высокая7,6 | — | 75,0 % | 31 янв. 2006 г. |
51В плане | CVE-2004-1373Готовый эксплойт | Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrarnullsoft · shoutcast server | Высокая7,5 | — | 70,1 % | 23 дек. 2004 г. |
48В плане | CVE-2009-1831Готовый эксплойт | The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via nullsoft · winamp · CWE-189 | Критическая9,3 | — | 36,3 % | 29 мая 2009 г. |
45В плане | CVE-2004-1119Proof of concept | Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arnullsoft · winamp | Критическая10,0 | — | 17,3 % | 10 янв. 2005 г. |
45В плане | CVE-2009-0263Proof of concept | Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary codnullsoft · winamp · CWE-119 | Критическая10,0 | — | 16,7 % | 23 янв. 2009 г. |
41В плане | CVE-2006-5567Proof of concept | Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via anullsoft · winamp | Критическая9,3 | — | 14,5 % | 27 окт. 2006 г. |
41В плане | CVE-2005-2310Proof of concept | Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an Mnullsoft · winamp · CWE-119 | Критическая9,3 | — | 13,1 % | 19 июл. 2005 г. |
41В плане | CVE-2006-3228Proof of concept | Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .nullsoft · winamp | Критическая9,3 | — | 11,7 % | 26 июн. 2006 г. |
41В плане | CVE-2011-4857Эксплойта нет | Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted sonnullsoft · winamp · CWE-119 | Критическая10,0 | — | 4,7 % | 16 дек. 2011 г. |
40В плане | CVE-2007-2498Proof of concept | libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file.nullsoft · winamp | Критическая9,3 | — | 10,2 % | 3 мая 2007 г. |
40В плане | CVE-2009-0833Proof of concept | Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execute arbitrary code via myplugins · gen msn · CWE-119 | Критическая9,3 | — | 9,3 % | 5 мар. 2009 г. |
39Наблюдать | CVE-2009-1788Эксплойта нет | Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programsmega-nerd · libsndfile · CWE-119 | Критическая9,3 | — | 8,2 % | 26 мая 2009 г. |
39Наблюдать | CVE-2010-3137Proof of concept | Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackersnullsoft · winamp | Критическая9,3 | — | 7,8 % | 26 авг. 2010 г. |
39Наблюдать | CVE-2006-0708Эксплойта нет | Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containinnullsoft · winamp | Критическая9,3 | — | 7,2 % | 15 февр. 2006 г. |
39Наблюдать | CVE-2007-4619Эксплойта нет | Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow flac · libflac · CWE-189 | Критическая9,3 | — | 6,7 % | 12 окт. 2007 г. |
39Наблюдать | CVE-2009-3995Эксплойта нет | Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allownullsoft · winamp · CWE-119 | Критическая9,3 | — | 6,7 % | 18 дек. 2009 г. |
39Наблюдать | CVE-2009-1791Эксплойта нет | Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programmega-nerd · libsndfile · CWE-119 | Критическая9,3 | — | 6,5 % | 26 мая 2009 г. |
39Наблюдать | CVE-2009-3996Эксплойта нет | Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote atnullsoft · winamp · CWE-119 | Критическая9,3 | — | 6,5 % | 18 дек. 2009 г. |
39Наблюдать | CVE-2010-4371Proof of concept | Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the cnullsoft · winamp · CWE-119 | Критическая9,3 | — | 6,1 % | 2 дек. 2010 г. |
39Наблюдать | CVE-2009-3997Эксплойта нет | Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary codenullsoft · winamp · CWE-189 | Критическая9,3 | — | 5,7 % | 18 дек. 2009 г. |
39Наблюдать | CVE-2010-2586Эксплойта нет | Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crnullsoft · winamp · CWE-189 | Критическая9,3 | — | 5,5 % | 2 дек. 2010 г. |
39Наблюдать | CVE-2010-1523Эксплойта нет | Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to exnullsoft · winamp · CWE-119 | Критическая9,3 | — | 5,3 % | 5 нояб. 2010 г. |
39Наблюдать | CVE-2010-4370Эксплойта нет | Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI finullsoft · winamp · CWE-189 | Критическая9,3 | — | 5,1 % | 2 дек. 2010 г. |
39Наблюдать | CVE-2011-3834Эксплойта нет | Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file nullsoft · winamp · CWE-189 | Критическая9,3 | — | 5,1 % | 16 дек. 2011 г. |
38Наблюдать | CVE-2009-4356Эксплойта нет | Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via manullsoft · winamp · CWE-189 | Критическая9,3 | — | 5,0 % | 18 дек. 2009 г. |
- CVE-2006-047652В плане
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (F
ВысокаяCVSS 7,6Готовый эксплойтEPSS 75 %nullsoft · winamp31 янв. 2006 г.
- CVE-2004-137351В плане
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrar
ВысокаяCVSS 7,5Готовый эксплойтEPSS 70 %nullsoft · shoutcast server23 дек. 2004 г.
- CVE-2009-183148В плане
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via
КритическаяCVSS 9,3Готовый эксплойтEPSS 36 %nullsoft · winamp29 мая 2009 г.
- CVE-2004-111945В плане
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute ar
КритическаяCVSS 10,0Proof of conceptEPSS 17 %nullsoft · winamp10 янв. 2005 г.
- CVE-2009-026345В плане
Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary cod
КритическаяCVSS 10,0Proof of conceptEPSS 17 %nullsoft · winamp23 янв. 2009 г.
- CVE-2006-556741В плане
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a
КритическаяCVSS 9,3Proof of conceptEPSS 15 %nullsoft · winamp27 окт. 2006 г.
- CVE-2005-231041В плане
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an M
КритическаяCVSS 9,3Proof of conceptEPSS 13 %nullsoft · winamp19 июл. 2005 г.
- CVE-2006-322841В плане
Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .
КритическаяCVSS 9,3Proof of conceptEPSS 12 %nullsoft · winamp26 июн. 2006 г.
- CVE-2011-485741В плане
Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted son
КритическаяCVSS 10,0Эксплойта нетEPSS 5 %nullsoft · winamp16 дек. 2011 г.
- CVE-2007-249840В плане
libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file.
КритическаяCVSS 9,3Proof of conceptEPSS 10 %nullsoft · winamp3 мая 2007 г.
- CVE-2009-083340В плане
Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execute arbitrary code via
КритическаяCVSS 9,3Proof of conceptEPSS 9 %myplugins · gen msn5 мар. 2009 г.
- CVE-2009-178839Наблюдать
Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs
КритическаяCVSS 9,3Эксплойта нетEPSS 8 %mega-nerd · libsndfile26 мая 2009 г.
- CVE-2010-313739Наблюдать
Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers
КритическаяCVSS 9,3Proof of conceptEPSS 8 %nullsoft · winamp26 авг. 2010 г.
- CVE-2006-070839Наблюдать
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containin
КритическаяCVSS 9,3Эксплойта нетEPSS 7 %nullsoft · winamp15 февр. 2006 г.
- CVE-2007-461939Наблюдать
Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow
КритическаяCVSS 9,3Эксплойта нетEPSS 7 %flac · libflac12 окт. 2007 г.
- CVE-2009-399539Наблюдать
Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow
КритическаяCVSS 9,3Эксплойта нетEPSS 7 %nullsoft · winamp18 дек. 2009 г.
- CVE-2009-179139Наблюдать
Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media program
КритическаяCVSS 9,3Эксплойта нетEPSS 7 %mega-nerd · libsndfile26 мая 2009 г.
- CVE-2009-399639Наблюдать
Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote at
КритическаяCVSS 9,3Эксплойта нетEPSS 6 %nullsoft · winamp18 дек. 2009 г.
- CVE-2010-437139Наблюдать
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the c
КритическаяCVSS 9,3Proof of conceptEPSS 6 %nullsoft · winamp2 дек. 2010 г.
- CVE-2009-399739Наблюдать
Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code
КритическаяCVSS 9,3Эксплойта нетEPSS 6 %nullsoft · winamp18 дек. 2009 г.
- CVE-2010-258639Наблюдать
Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a cr
КритическаяCVSS 9,3Эксплойта нетEPSS 6 %nullsoft · winamp2 дек. 2010 г.
- CVE-2010-152339Наблюдать
Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to ex
КритическаяCVSS 9,3Эксплойта нетEPSS 5 %nullsoft · winamp5 нояб. 2010 г.
- CVE-2010-437039Наблюдать
Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI fi
КритическаяCVSS 9,3Эксплойта нетEPSS 5 %nullsoft · winamp2 дек. 2010 г.
- CVE-2011-383439Наблюдать
Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file
КритическаяCVSS 9,3Эксплойта нетEPSS 5 %nullsoft · winamp16 дек. 2011 г.
- CVE-2009-435638Наблюдать
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via ma
КритическаяCVSS 9,3Эксплойта нетEPSS 5 %nullsoft · winamp18 дек. 2009 г.