// For flags

CVE-2009-3995

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Severity Score

9.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details are obtained from third party information.

Múltiples desbordamientos de búfer en la región heap de la memoria en la biblioteca IN_MOD. DLL (también se conoce como el Plug-in Module Decoder) en Winamp anterior a versión 5.57, y libmikmod versión 3.1.12, podría permitir a los atacantes remotos ejecutar código arbitrario por medio de (1) muestras especialmente diseñadas o (2) definiciones de instrumento diseñadas en un archivo Impulse Tracker. NOTA: algunos de estos datos fueron obtenidos de la información de terceros.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-11-19 CVE Reserved
  • 2009-12-17 CVE Published
  • 2024-06-17 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
<= 5.56
Search vendor "Nullsoft" for product "Winamp" and version " <= 5.56"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
0.20a
Search vendor "Nullsoft" for product "Winamp" and version "0.20a"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
0.92
Search vendor "Nullsoft" for product "Winamp" and version "0.92"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
1.006
Search vendor "Nullsoft" for product "Winamp" and version "1.006"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
1.90
Search vendor "Nullsoft" for product "Winamp" and version "1.90"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.0
Search vendor "Nullsoft" for product "Winamp" and version "2.0"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.4
Search vendor "Nullsoft" for product "Winamp" and version "2.4"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.5e
Search vendor "Nullsoft" for product "Winamp" and version "2.5e"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.6
Search vendor "Nullsoft" for product "Winamp" and version "2.6"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.6x
Search vendor "Nullsoft" for product "Winamp" and version "2.6x"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.7x
Search vendor "Nullsoft" for product "Winamp" and version "2.7x"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.9
Search vendor "Nullsoft" for product "Winamp" and version "2.9"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.10
Search vendor "Nullsoft" for product "Winamp" and version "2.10"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.24
Search vendor "Nullsoft" for product "Winamp" and version "2.24"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.50
Search vendor "Nullsoft" for product "Winamp" and version "2.50"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.60
Search vendor "Nullsoft" for product "Winamp" and version "2.60"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.60
Search vendor "Nullsoft" for product "Winamp" and version "2.60"
full
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.60
Search vendor "Nullsoft" for product "Winamp" and version "2.60"
lite
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.61
Search vendor "Nullsoft" for product "Winamp" and version "2.61"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.61
Search vendor "Nullsoft" for product "Winamp" and version "2.61"
full
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.62
Search vendor "Nullsoft" for product "Winamp" and version "2.62"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.62
Search vendor "Nullsoft" for product "Winamp" and version "2.62"
standard
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.64
Search vendor "Nullsoft" for product "Winamp" and version "2.64"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.64
Search vendor "Nullsoft" for product "Winamp" and version "2.64"
standard
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.65
Search vendor "Nullsoft" for product "Winamp" and version "2.65"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.70
Search vendor "Nullsoft" for product "Winamp" and version "2.70"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.70
Search vendor "Nullsoft" for product "Winamp" and version "2.70"
full
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.71
Search vendor "Nullsoft" for product "Winamp" and version "2.71"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.72
Search vendor "Nullsoft" for product "Winamp" and version "2.72"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.73
Search vendor "Nullsoft" for product "Winamp" and version "2.73"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.73
Search vendor "Nullsoft" for product "Winamp" and version "2.73"
full
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.74
Search vendor "Nullsoft" for product "Winamp" and version "2.74"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.75
Search vendor "Nullsoft" for product "Winamp" and version "2.75"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.76
Search vendor "Nullsoft" for product "Winamp" and version "2.76"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.77
Search vendor "Nullsoft" for product "Winamp" and version "2.77"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.78
Search vendor "Nullsoft" for product "Winamp" and version "2.78"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.79
Search vendor "Nullsoft" for product "Winamp" and version "2.79"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.80
Search vendor "Nullsoft" for product "Winamp" and version "2.80"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.81
Search vendor "Nullsoft" for product "Winamp" and version "2.81"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.90
Search vendor "Nullsoft" for product "Winamp" and version "2.90"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.91
Search vendor "Nullsoft" for product "Winamp" and version "2.91"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.92
Search vendor "Nullsoft" for product "Winamp" and version "2.92"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
2.95
Search vendor "Nullsoft" for product "Winamp" and version "2.95"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
3.0
Search vendor "Nullsoft" for product "Winamp" and version "3.0"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
3.1
Search vendor "Nullsoft" for product "Winamp" and version "3.1"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.0
Search vendor "Nullsoft" for product "Winamp" and version "5.0"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.0.1
Search vendor "Nullsoft" for product "Winamp" and version "5.0.1"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.0.2
Search vendor "Nullsoft" for product "Winamp" and version "5.0.2"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.01
Search vendor "Nullsoft" for product "Winamp" and version "5.01"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.1
Search vendor "Nullsoft" for product "Winamp" and version "5.1"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.1
Search vendor "Nullsoft" for product "Winamp" and version "5.1"
surround
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.02
Search vendor "Nullsoft" for product "Winamp" and version "5.02"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.2
Search vendor "Nullsoft" for product "Winamp" and version "5.2"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.3
Search vendor "Nullsoft" for product "Winamp" and version "5.3"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.03
Search vendor "Nullsoft" for product "Winamp" and version "5.03"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.03a
Search vendor "Nullsoft" for product "Winamp" and version "5.03a"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.04
Search vendor "Nullsoft" for product "Winamp" and version "5.04"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.05
Search vendor "Nullsoft" for product "Winamp" and version "5.05"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.5
Search vendor "Nullsoft" for product "Winamp" and version "5.5"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.06
Search vendor "Nullsoft" for product "Winamp" and version "5.06"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.07
Search vendor "Nullsoft" for product "Winamp" and version "5.07"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.08
Search vendor "Nullsoft" for product "Winamp" and version "5.08"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.08
Search vendor "Nullsoft" for product "Winamp" and version "5.08"
c
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.08
Search vendor "Nullsoft" for product "Winamp" and version "5.08"
d
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.08
Search vendor "Nullsoft" for product "Winamp" and version "5.08"
e
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.08c
Search vendor "Nullsoft" for product "Winamp" and version "5.08c"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.08d
Search vendor "Nullsoft" for product "Winamp" and version "5.08d"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.08e
Search vendor "Nullsoft" for product "Winamp" and version "5.08e"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.09
Search vendor "Nullsoft" for product "Winamp" and version "5.09"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.11
Search vendor "Nullsoft" for product "Winamp" and version "5.11"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.12
Search vendor "Nullsoft" for product "Winamp" and version "5.12"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.13
Search vendor "Nullsoft" for product "Winamp" and version "5.13"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.21
Search vendor "Nullsoft" for product "Winamp" and version "5.21"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.22
Search vendor "Nullsoft" for product "Winamp" and version "5.22"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.23
Search vendor "Nullsoft" for product "Winamp" and version "5.23"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.24
Search vendor "Nullsoft" for product "Winamp" and version "5.24"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.31
Search vendor "Nullsoft" for product "Winamp" and version "5.31"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.32
Search vendor "Nullsoft" for product "Winamp" and version "5.32"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.33
Search vendor "Nullsoft" for product "Winamp" and version "5.33"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.34
Search vendor "Nullsoft" for product "Winamp" and version "5.34"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.35
Search vendor "Nullsoft" for product "Winamp" and version "5.35"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.36
Search vendor "Nullsoft" for product "Winamp" and version "5.36"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.51
Search vendor "Nullsoft" for product "Winamp" and version "5.51"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.52
Search vendor "Nullsoft" for product "Winamp" and version "5.52"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.53
Search vendor "Nullsoft" for product "Winamp" and version "5.53"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.54
Search vendor "Nullsoft" for product "Winamp" and version "5.54"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.55
Search vendor "Nullsoft" for product "Winamp" and version "5.55"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.091
Search vendor "Nullsoft" for product "Winamp" and version "5.091"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.093
Search vendor "Nullsoft" for product "Winamp" and version "5.093"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.094
Search vendor "Nullsoft" for product "Winamp" and version "5.094"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.111
Search vendor "Nullsoft" for product "Winamp" and version "5.111"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.112
Search vendor "Nullsoft" for product "Winamp" and version "5.112"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.531
Search vendor "Nullsoft" for product "Winamp" and version "5.531"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.541
Search vendor "Nullsoft" for product "Winamp" and version "5.541"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.551
Search vendor "Nullsoft" for product "Winamp" and version "5.551"
-
Affected
Nullsoft
Search vendor "Nullsoft"
Winamp
Search vendor "Nullsoft" for product "Winamp"
5.552
Search vendor "Nullsoft" for product "Winamp" and version "5.552"
-
Affected
Raphael Assenat
Search vendor "Raphael Assenat"
Libmikmod
Search vendor "Raphael Assenat" for product "Libmikmod"
3.1.12
Search vendor "Raphael Assenat" for product "Libmikmod" and version "3.1.12"
-
Affected