CVE-2007-4392

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-17 · updated 2026-06-16

Description

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Affected products

Nullsoft Winamp: 5.35

References

http://morph3us.org/advisories/20070730-winamp-5.35.txt
http://securityreason.com/securityalert/3040
http://www.securityfocus.com/archive/1/475161/100/200/threaded
http://www.securityfocus.com/archive/1/475183/100/200/threaded
http://www.securityfocus.com/archive/1/475260/100/200/threaded
http://www.securityfocus.com/archive/1/475489/100/200/threaded
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15504
http://morph3us.org/advisories/20070730-winamp-5.35.txt
http://securityreason.com/securityalert/3040
http://www.securityfocus.com/archive/1/475161/100/200/threaded
http://www.securityfocus.com/archive/1/475183/100/200/threaded
http://www.securityfocus.com/archive/1/475260/100/200/threaded

Get alerted when CVE-2007-4392 or the next vulnerability affects your stack