What’s Vulnerable › Vulnerabilities

CVE-2009-1831

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 36.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-05-29 · updated 2026-06-16
• Weakness: CWE-189

Description

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.

Affected products

• Nullsoft Winamp: through 5.55; 2.0, 2.4, 2.5e, 2.6x, 2.7x, 2.10 (+70)

References

• http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html
• http://www.securityfocus.com/bid/35052
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50664
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683
• https://www.exploit-db.com/exploits/8767
• https://www.exploit-db.com/exploits/8770
• https://www.exploit-db.com/exploits/8772
• https://www.exploit-db.com/exploits/8783
• http://vrt-sourcefire.blogspot.com/2009/05/winamp-maki-parsing-vulnerability.html
• http://www.securityfocus.com/bid/35052
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50664
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15683

Get alerted when CVE-2009-1831 or the next vulnerability affects your stack