CVE-2009-4356
 
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file.
Múltiples desbordamientos de entero en la los filtros jpeg.w5s y png.w5s de Winamp v5.57 permiten a atacantes remotos ejecutar código arbitrario a través de datos (1) JPEG o (2) PNG mal formados en un archivo MP3.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-12-18 CVE Reserved
- 2009-12-18 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- 2024-09-07 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-189: Numeric Errors
CAPEC
References (6)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/archive/1/508532/100/0/threaded | Mailing List | |
http://www.securityfocus.com/bid/37387 | Vdb Entry | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15743 | Signature |
URL | Date | SRC |
---|---|---|
http://www.vupen.com/exploits/Winamp_png_w5s_PNG_Data_Processing_Integer_Overflow_PoC_3576274.php | 2024-08-07 |
URL | Date | SRC |
---|---|---|
http://forums.winamp.com/showthread.php?threadid=315355 | 2018-10-10 |
URL | Date | SRC |
---|---|---|
http://www.vupen.com/english/advisories/2009/3576 | 2018-10-10 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | <= 5.56 Search vendor "Nullsoft" for product "Winamp" and version " <= 5.56" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 0.20a Search vendor "Nullsoft" for product "Winamp" and version "0.20a" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 0.92 Search vendor "Nullsoft" for product "Winamp" and version "0.92" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 1.006 Search vendor "Nullsoft" for product "Winamp" and version "1.006" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 1.90 Search vendor "Nullsoft" for product "Winamp" and version "1.90" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.0 Search vendor "Nullsoft" for product "Winamp" and version "2.0" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.4 Search vendor "Nullsoft" for product "Winamp" and version "2.4" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.5e Search vendor "Nullsoft" for product "Winamp" and version "2.5e" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.6 Search vendor "Nullsoft" for product "Winamp" and version "2.6" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.6x Search vendor "Nullsoft" for product "Winamp" and version "2.6x" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.7x Search vendor "Nullsoft" for product "Winamp" and version "2.7x" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.9 Search vendor "Nullsoft" for product "Winamp" and version "2.9" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.10 Search vendor "Nullsoft" for product "Winamp" and version "2.10" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.24 Search vendor "Nullsoft" for product "Winamp" and version "2.24" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.50 Search vendor "Nullsoft" for product "Winamp" and version "2.50" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.60 Search vendor "Nullsoft" for product "Winamp" and version "2.60" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.60 Search vendor "Nullsoft" for product "Winamp" and version "2.60" | full |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.60 Search vendor "Nullsoft" for product "Winamp" and version "2.60" | lite |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.61 Search vendor "Nullsoft" for product "Winamp" and version "2.61" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.61 Search vendor "Nullsoft" for product "Winamp" and version "2.61" | full |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.62 Search vendor "Nullsoft" for product "Winamp" and version "2.62" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.62 Search vendor "Nullsoft" for product "Winamp" and version "2.62" | standard |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.64 Search vendor "Nullsoft" for product "Winamp" and version "2.64" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.64 Search vendor "Nullsoft" for product "Winamp" and version "2.64" | standard |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.65 Search vendor "Nullsoft" for product "Winamp" and version "2.65" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.70 Search vendor "Nullsoft" for product "Winamp" and version "2.70" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.70 Search vendor "Nullsoft" for product "Winamp" and version "2.70" | full |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.71 Search vendor "Nullsoft" for product "Winamp" and version "2.71" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.72 Search vendor "Nullsoft" for product "Winamp" and version "2.72" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.73 Search vendor "Nullsoft" for product "Winamp" and version "2.73" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.73 Search vendor "Nullsoft" for product "Winamp" and version "2.73" | full |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.74 Search vendor "Nullsoft" for product "Winamp" and version "2.74" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.75 Search vendor "Nullsoft" for product "Winamp" and version "2.75" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.76 Search vendor "Nullsoft" for product "Winamp" and version "2.76" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.77 Search vendor "Nullsoft" for product "Winamp" and version "2.77" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.78 Search vendor "Nullsoft" for product "Winamp" and version "2.78" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.79 Search vendor "Nullsoft" for product "Winamp" and version "2.79" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.80 Search vendor "Nullsoft" for product "Winamp" and version "2.80" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.81 Search vendor "Nullsoft" for product "Winamp" and version "2.81" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.90 Search vendor "Nullsoft" for product "Winamp" and version "2.90" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.91 Search vendor "Nullsoft" for product "Winamp" and version "2.91" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.92 Search vendor "Nullsoft" for product "Winamp" and version "2.92" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 2.95 Search vendor "Nullsoft" for product "Winamp" and version "2.95" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 3.0 Search vendor "Nullsoft" for product "Winamp" and version "3.0" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 3.1 Search vendor "Nullsoft" for product "Winamp" and version "3.1" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.0 Search vendor "Nullsoft" for product "Winamp" and version "5.0" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.0.1 Search vendor "Nullsoft" for product "Winamp" and version "5.0.1" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.0.2 Search vendor "Nullsoft" for product "Winamp" and version "5.0.2" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.01 Search vendor "Nullsoft" for product "Winamp" and version "5.01" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.1 Search vendor "Nullsoft" for product "Winamp" and version "5.1" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.1 Search vendor "Nullsoft" for product "Winamp" and version "5.1" | surround |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.02 Search vendor "Nullsoft" for product "Winamp" and version "5.02" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.2 Search vendor "Nullsoft" for product "Winamp" and version "5.2" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.3 Search vendor "Nullsoft" for product "Winamp" and version "5.3" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.03 Search vendor "Nullsoft" for product "Winamp" and version "5.03" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.03a Search vendor "Nullsoft" for product "Winamp" and version "5.03a" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.04 Search vendor "Nullsoft" for product "Winamp" and version "5.04" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.05 Search vendor "Nullsoft" for product "Winamp" and version "5.05" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.5 Search vendor "Nullsoft" for product "Winamp" and version "5.5" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.06 Search vendor "Nullsoft" for product "Winamp" and version "5.06" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.07 Search vendor "Nullsoft" for product "Winamp" and version "5.07" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08" | c |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08" | d |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.08 Search vendor "Nullsoft" for product "Winamp" and version "5.08" | e |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.08c Search vendor "Nullsoft" for product "Winamp" and version "5.08c" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.08d Search vendor "Nullsoft" for product "Winamp" and version "5.08d" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.08e Search vendor "Nullsoft" for product "Winamp" and version "5.08e" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.09 Search vendor "Nullsoft" for product "Winamp" and version "5.09" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.11 Search vendor "Nullsoft" for product "Winamp" and version "5.11" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.12 Search vendor "Nullsoft" for product "Winamp" and version "5.12" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.13 Search vendor "Nullsoft" for product "Winamp" and version "5.13" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.21 Search vendor "Nullsoft" for product "Winamp" and version "5.21" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.22 Search vendor "Nullsoft" for product "Winamp" and version "5.22" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.23 Search vendor "Nullsoft" for product "Winamp" and version "5.23" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.24 Search vendor "Nullsoft" for product "Winamp" and version "5.24" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.31 Search vendor "Nullsoft" for product "Winamp" and version "5.31" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.32 Search vendor "Nullsoft" for product "Winamp" and version "5.32" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.33 Search vendor "Nullsoft" for product "Winamp" and version "5.33" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.34 Search vendor "Nullsoft" for product "Winamp" and version "5.34" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.35 Search vendor "Nullsoft" for product "Winamp" and version "5.35" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.36 Search vendor "Nullsoft" for product "Winamp" and version "5.36" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.51 Search vendor "Nullsoft" for product "Winamp" and version "5.51" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.52 Search vendor "Nullsoft" for product "Winamp" and version "5.52" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.53 Search vendor "Nullsoft" for product "Winamp" and version "5.53" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.54 Search vendor "Nullsoft" for product "Winamp" and version "5.54" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.55 Search vendor "Nullsoft" for product "Winamp" and version "5.55" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.091 Search vendor "Nullsoft" for product "Winamp" and version "5.091" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.093 Search vendor "Nullsoft" for product "Winamp" and version "5.093" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.094 Search vendor "Nullsoft" for product "Winamp" and version "5.094" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.111 Search vendor "Nullsoft" for product "Winamp" and version "5.111" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.112 Search vendor "Nullsoft" for product "Winamp" and version "5.112" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.531 Search vendor "Nullsoft" for product "Winamp" and version "5.531" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.541 Search vendor "Nullsoft" for product "Winamp" and version "5.541" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.551 Search vendor "Nullsoft" for product "Winamp" and version "5.551" | - |
Affected
| ||||||
Nullsoft Search vendor "Nullsoft" | Winamp Search vendor "Nullsoft" for product "Winamp" | 5.552 Search vendor "Nullsoft" for product "Winamp" and version "5.552" | - |
Affected
|