NVD

Id
51150  
Name
CVE-2009-3995  
Description
Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-18  
Modified Date
2010-08-20  
Seq
2009-3995  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259312 51150 CVE-2009-3995 http://forums.winamp.com/showthread.php?threadid=315355  View
259313 51150 CVE-2009-3995 SUSE-SR:2010:011  View
259314 51150 CVE-2009-3995 MDVSA-2010:151  View
259315 51150 CVE-2009-3995 20091217 Secunia Research: Winamp Impulse Tracker Sample Parsing Buffer Overflow  View
259316 51150 CVE-2009-3995 20091217 Secunia Research: Winamp Impulse Tracker Instrument Parsing Buffer Overflows  View
259317 51150 CVE-2009-3995 37374  View
259318 51150 CVE-2009-3995 ADV-2009-3575  View
259319 51150 CVE-2009-3995 ADV-2010-1107  View
259320 51150 CVE-2009-3995 ADV-2010-1957  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41568 JVNDB-2009-002575 Winamp および libmikmod の IN_MOD.DLL におけるヒープベースのバッファオーバーフローの脆弱性 Winamp および libmikmod の IN_MOD.DLL には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-3995 41426 CVE-2009-3995 51150 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002575.html 2009-12-18 2010-10-14 View