CVE-2010-1523

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-11-06 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2) video stream.

Affected products

Nullsoft Winamp: through 5.581; 0.20a, 0.92, 1.006, 1.90, 2.0, 2.4 (+85)

References

http://forums.winamp.com/showthread.php?t=322995
http://secunia.com/secunia_research/2010-95/
http://www.securityfocus.com/archive/1/514484/100/0/threaded
http://www.securityfocus.com/bid/44466
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12056
http://forums.winamp.com/showthread.php?t=322995
http://secunia.com/secunia_research/2010-95/
http://www.securityfocus.com/archive/1/514484/100/0/threaded
http://www.securityfocus.com/bid/44466
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12056

Get alerted when CVE-2010-1523 or the next vulnerability affects your stack