CVE-2009-0263

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-01-23 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.

Affected products

Nullsoft Winamp: through 5.541; 2.0, 2.4, 2.5e, 2.6x, 2.7x, 2.10 (+69)

References

http://secunia.com/advisories/33478
http://www.securityfocus.com/bid/33226
http://www.vupen.com/english/advisories/2009/0113
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756
https://www.exploit-db.com/exploits/7742
http://secunia.com/advisories/33478
http://www.securityfocus.com/bid/33226
http://www.vupen.com/english/advisories/2009/0113
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14756
https://www.exploit-db.com/exploits/7742

Get alerted when CVE-2009-0263 or the next vulnerability affects your stack