CVE-2009-1831

Winamp 5.551 - MAKI Parsing Integer Overflow (PoC)

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.

El módulo de Nullsoft Modern Skins Support (biblioteca gen_ff.dll) en Winamp de Nullsoft anterior a versión 5.552, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo MAKI diseñado, que desencadena una extensión de signo incorrecta, un desbordamiento de enteros y un desbordamiento de búfer en la región stack de la memoria.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-05-29 CVE Reserved
2009-05-29 CVE Published
2012-09-12 First Exploit
2024-08-07 CVE Updated
2024-09-25 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-189: Numeric Errors

CAPEC

References (9)

URL	Tag	Source
http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html	X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/50664	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/8767	2024-08-07
https://www.exploit-db.com/exploits/21256	2012-09-12
https://www.exploit-db.com/exploits/8772	2024-08-07
https://www.exploit-db.com/exploits/8770	2024-08-07
https://www.exploit-db.com/exploits/8783	2024-08-07
http://www.securityfocus.com/bid/35052	2024-08-07

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				<= 5.55 Search vendor "Nullsoft" for product "Winamp" and version " <= 5.55"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.0 Search vendor "Nullsoft" for product "Winamp" and version "2.0"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.4 Search vendor "Nullsoft" for product "Winamp" and version "2.4"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.5e Search vendor "Nullsoft" for product "Winamp" and version "2.5e"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.6x Search vendor "Nullsoft" for product "Winamp" and version "2.6x"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.7x Search vendor "Nullsoft" for product "Winamp" and version "2.7x"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.10 Search vendor "Nullsoft" for product "Winamp" and version "2.10"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.24 Search vendor "Nullsoft" for product "Winamp" and version "2.24"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.50 Search vendor "Nullsoft" for product "Winamp" and version "2.50"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.60 Search vendor "Nullsoft" for product "Winamp" and version "2.60"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.60 Search vendor "Nullsoft" for product "Winamp" and version "2.60"		full		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.60 Search vendor "Nullsoft" for product "Winamp" and version "2.60"		lite		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.61 Search vendor "Nullsoft" for product "Winamp" and version "2.61"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.61 Search vendor "Nullsoft" for product "Winamp" and version "2.61"		full		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.62 Search vendor "Nullsoft" for product "Winamp" and version "2.62"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.62 Search vendor "Nullsoft" for product "Winamp" and version "2.62"		standard		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.64 Search vendor "Nullsoft" for product "Winamp" and version "2.64"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.64 Search vendor "Nullsoft" for product "Winamp" and version "2.64"		standard		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.65 Search vendor "Nullsoft" for product "Winamp" and version "2.65"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.70 Search vendor "Nullsoft" for product "Winamp" and version "2.70"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.70 Search vendor "Nullsoft" for product "Winamp" and version "2.70"		full		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.71 Search vendor "Nullsoft" for product "Winamp" and version "2.71"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.72 Search vendor "Nullsoft" for product "Winamp" and version "2.72"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.73 Search vendor "Nullsoft" for product "Winamp" and version "2.73"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.73 Search vendor "Nullsoft" for product "Winamp" and version "2.73"		full		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.74 Search vendor "Nullsoft" for product "Winamp" and version "2.74"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.75 Search vendor "Nullsoft" for product "Winamp" and version "2.75"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.76 Search vendor "Nullsoft" for product "Winamp" and version "2.76"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.77 Search vendor "Nullsoft" for product "Winamp" and version "2.77"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.78 Search vendor "Nullsoft" for product "Winamp" and version "2.78"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.79 Search vendor "Nullsoft" for product "Winamp" and version "2.79"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.80 Search vendor "Nullsoft" for product "Winamp" and version "2.80"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.81 Search vendor "Nullsoft" for product "Winamp" and version "2.81"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.90 Search vendor "Nullsoft" for product "Winamp" and version "2.90"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.91 Search vendor "Nullsoft" for product "Winamp" and version "2.91"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.95 Search vendor "Nullsoft" for product "Winamp" and version "2.95"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				3.0 Search vendor "Nullsoft" for product "Winamp" and version "3.0"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				3.1 Search vendor "Nullsoft" for product "Winamp" and version "3.1"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.0 Search vendor "Nullsoft" for product "Winamp" and version "5.0"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.0.1 Search vendor "Nullsoft" for product "Winamp" and version "5.0.1"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.0.2 Search vendor "Nullsoft" for product "Winamp" and version "5.0.2"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.01 Search vendor "Nullsoft" for product "Winamp" and version "5.01"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.1 Search vendor "Nullsoft" for product "Winamp" and version "5.1"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.02 Search vendor "Nullsoft" for product "Winamp" and version "5.02"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.2 Search vendor "Nullsoft" for product "Winamp" and version "5.2"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.3 Search vendor "Nullsoft" for product "Winamp" and version "5.3"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.03 Search vendor "Nullsoft" for product "Winamp" and version "5.03"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.03a Search vendor "Nullsoft" for product "Winamp" and version "5.03a"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.04 Search vendor "Nullsoft" for product "Winamp" and version "5.04"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.05 Search vendor "Nullsoft" for product "Winamp" and version "5.05"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.5 Search vendor "Nullsoft" for product "Winamp" and version "5.5"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.06 Search vendor "Nullsoft" for product "Winamp" and version "5.06"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.07 Search vendor "Nullsoft" for product "Winamp" and version "5.07"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08"		c		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08"		d		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08"		e		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.08c Search vendor "Nullsoft" for product "Winamp" and version "5.08c"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.08d Search vendor "Nullsoft" for product "Winamp" and version "5.08d"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.08e Search vendor "Nullsoft" for product "Winamp" and version "5.08e"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.09 Search vendor "Nullsoft" for product "Winamp" and version "5.09"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.11 Search vendor "Nullsoft" for product "Winamp" and version "5.11"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.12 Search vendor "Nullsoft" for product "Winamp" and version "5.12"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.13 Search vendor "Nullsoft" for product "Winamp" and version "5.13"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.21 Search vendor "Nullsoft" for product "Winamp" and version "5.21"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.22 Search vendor "Nullsoft" for product "Winamp" and version "5.22"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.23 Search vendor "Nullsoft" for product "Winamp" and version "5.23"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.24 Search vendor "Nullsoft" for product "Winamp" and version "5.24"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.31 Search vendor "Nullsoft" for product "Winamp" and version "5.31"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.32 Search vendor "Nullsoft" for product "Winamp" and version "5.32"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.33 Search vendor "Nullsoft" for product "Winamp" and version "5.33"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.34 Search vendor "Nullsoft" for product "Winamp" and version "5.34"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.35 Search vendor "Nullsoft" for product "Winamp" and version "5.35"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.36 Search vendor "Nullsoft" for product "Winamp" and version "5.36"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.51 Search vendor "Nullsoft" for product "Winamp" and version "5.51"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.52 Search vendor "Nullsoft" for product "Winamp" and version "5.52"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.53 Search vendor "Nullsoft" for product "Winamp" and version "5.53"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.54 Search vendor "Nullsoft" for product "Winamp" and version "5.54"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.091 Search vendor "Nullsoft" for product "Winamp" and version "5.091"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.093 Search vendor "Nullsoft" for product "Winamp" and version "5.093"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.094 Search vendor "Nullsoft" for product "Winamp" and version "5.094"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.111 Search vendor "Nullsoft" for product "Winamp" and version "5.111"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.112 Search vendor "Nullsoft" for product "Winamp" and version "5.112"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				5.541 Search vendor "Nullsoft" for product "Winamp" and version "5.541"		-		Affected