CVE-2007-2498

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-05-04 · updated 2026-06-16

Description

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.

Affected products

Nullsoft Winamp: 5.2, 5.3, 5.21, 5.22, 5.23, 5.24 (+4)

References

http://secunia.com/advisories/25089
http://securitytracker.com/id?1017993
http://www.securityfocus.com/bid/23723
http://www.vupen.com/english/advisories/2007/1594
https://exchange.xforce.ibmcloud.com/vulnerabilities/34030
https://www.exploit-db.com/exploits/3823
http://secunia.com/advisories/25089
http://securitytracker.com/id?1017993
http://www.securityfocus.com/bid/23723
http://www.vupen.com/english/advisories/2007/1594
https://exchange.xforce.ibmcloud.com/vulnerabilities/34030
https://www.exploit-db.com/exploits/3823

Get alerted when CVE-2007-2498 or the next vulnerability affects your stack