CVE-2006-0476

HIGH 7.6CVE-2006-0476 · Published 31/01/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
winamp nullsoft	`= 5.12`	No fix yet

Description

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).

References

secunia.com/advisories/18649 · Patch
securityreason.com/securityalert/386
securityreason.com/securityalert/398
securitytracker.com/id
heise.de/newsticker/meldung/68981
kb.cert.org/vuls/id/604745 · US Government Resource
osvdb.org/22789
securityfocus.com/archive/1/423436/100/0/threaded
securityfocus.com/archive/1/423548/100/0/threaded
securityfocus.com/bid/16410
us-cert.gov/cas/techalerts/TA06-032A.html · US Government Resource
vupen.com/english/advisories/2006/0361
winamp.com/player/version_history.php
exchange.xforce.ibmcloud.com/vulnerabilities/24361
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402
exploit-db.com/exploits/3422

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free