CVE-2004-1119

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.

• http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html
• http://marc.info/?l=bugtraq&m=110123330404482&w=2
• http://marc.info/?l=bugtraq&m=110146036300803&w=2
• http://marc.info/?l=ntbugtraq&m=110126352412395&w=2
• http://marc.info/?l=ntbugtraq&m=110135574326217&w=2
• http://secunia.com/advisories/13269/
• http://www.kb.cert.org/vuls/id/986504US Government Resource
• http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf
• http://www.securityfocus.com/bid/11730Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18197
• http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html
• http://marc.info/?l=bugtraq&m=110123330404482&w=2
• http://marc.info/?l=bugtraq&m=110146036300803&w=2
• http://marc.info/?l=ntbugtraq&m=110126352412395&w=2
• http://marc.info/?l=ntbugtraq&m=110135574326217&w=2
• http://secunia.com/advisories/13269/
• http://www.kb.cert.org/vuls/id/986504US Government Resource
• http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf
• http://www.securityfocus.com/bid/11730Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18197

Published

Jan 10, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1113SQL injection vulnerability in SQLgrey Postfix greylisting s…
• CVE-2004-1114Buffer overflow in the handling of command line arguments in…
• CVE-2004-1115The init scripts in Search for Extraterrestrial Intelligence…
• CVE-2004-1116The init scripts in Great Internet Mersenne Prime Search (GI…
• CVE-2004-1117The init scripts in ChessBrain 20407 and earlier execute use…
• CVE-2004-1118Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX com…
• CVE-2004-1120Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3…
• CVE-2004-1121Apple Safari 1.0 through 1.2.3 allows remote attackers to sp…
• CVE-2004-1122Safari 1.x to 1.2.4, and possibly other versions, allows ina…
• CVE-2004-1123Darwin Streaming Server 5.0.1, and possibly earlier versions…
• CVE-2004-1124Unknown vulnerability in chroot on SCO UnixWare 7.1.1 throug…
• CVE-2004-1125Buffer overflow in the Gfx::doImage function in Gfx.cc for x…