CVE-2004-1119

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 17.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-01-10 · updated 2026-06-16

Description

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.

Affected products

Nullsoft Winamp: 5.01, 5.02, 5.03, 5.04, 5.05, 5.06

References

http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html
http://marc.info/?l=bugtraq&m=110123330404482&w=2
http://marc.info/?l=bugtraq&m=110146036300803&w=2
http://marc.info/?l=ntbugtraq&m=110126352412395&w=2
http://marc.info/?l=ntbugtraq&m=110135574326217&w=2
http://secunia.com/advisories/13269/
http://www.kb.cert.org/vuls/id/986504
http://www.security-assessment.com/Papers/Winamp_IN_CDDA_Buffer_Overflow.pdf
http://www.securityfocus.com/bid/11730
https://exchange.xforce.ibmcloud.com/vulnerabilities/18197
http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html
http://marc.info/?l=bugtraq&m=110123330404482&w=2

Get alerted when CVE-2004-1119 or the next vulnerability affects your stack