CVE-2008-0065
Last modified
CVE-2008-0065 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.. EPSS estimates a 61.27% chance of exploitation in the next 30 days.
Description
Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Winamp | Nullsoft Winamp | 5.5 |
| Winamp | Nullsoft Winamp | 5.21 |
| Winamp | Nullsoft Winamp | 5.51 |
References
- http://secunia.com/advisories/27865Vendor Advisory
- http://secunia.com/advisories/27865Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-0065?
How severe is CVE-2008-0065?
How do I fix CVE-2008-0065?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-0059Race condition in NSXML in Foundation for Apple Mac OS X 10.…
- CVE-2008-0060Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remo…
- CVE-2008-0061MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 bef…
- CVE-2008-0062KDC in MIT Kerberos 5 (krb5kdc) does not set a global variab…9.8
- CVE-2008-0063The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) do…7.5
- CVE-2008-0064Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) …
- CVE-2008-0066Multiple buffer overflows in htmsr.dll in the HTML speed rea…
- CVE-2008-0067Multiple stack-based buffer overflows in HP OpenView Network…
- CVE-2008-0068Directory traversal vulnerability in OpenView5.exe in HP Ope…
- CVE-2008-0069Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows…
- CVE-2008-0070Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Re…
- CVE-2008-0071The Web UI interface in (1) BitTorrent before 6.0.3 build 86…
Are you affected by CVE-2008-0065?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST