CVE

Id
9578  
CVE No.
CVE-2004-1150  
Status
Candidate  
Description
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.  
Phase
Assigned (20041207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
64956 9578 CVE-2004-1150 VULNWATCH:20050127 NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name  View
64957 9578 CVE-2004-1150 BUGTRAQ:20050127 NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name  View
64958 9578 CVE-2004-1150 URL:http://marc.info/?l=bugtraq&m=110684140108614&w=2  View
64959 9578 CVE-2004-1150 MISC:http://www.nsfocus.com/english/homepage/research/0501.htm  View
64960 9578 CVE-2004-1150 CONFIRM:http://www.winamp.com/player/version_history.php  View
64961 9578 CVE-2004-1150 BID:12381  View
64962 9578 CVE-2004-1150 URL:http://www.securityfocus.com/bid/12381  View
64963 9578 CVE-2004-1150 SECUNIA:13781  View
64964 9578 CVE-2004-1150 URL:http://secunia.com/advisories/13781  View
64965 9578 CVE-2004-1150 XF:winamp-incdda-bo(18840)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63164 JVNDB-2004-000506 Linux Kernel の sys_ia32.c におけるバッファオーバーフローの脆弱性 Linux Kernel には、 sys_ia32.c の sys32_ni_syscall() 関数および sys32_vm86_warning() 関数において、固定長バッファに対するチェックが不適切であるため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-1151 9578 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000506.html  View