CVE-2004-1119

Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a…

published December 1, 2004

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

🚨 A malicious .m3u playlist file could trigger a stack-based buffer overflow in Winamp 5.05, potentially letting attackers execute arbitrary code! 🔥 Think of it like a restaurant where a server accidentally delivers a dish with a hidden explosive — the playlist file is that dish, and if the server (Winamp) isn't careful, it can lead to a big bang! If an attacker successfully exploits this vulnerability, they could take control of your system, run malicious code, or even cause the application to crash. This means everything from stealing data to causing disruptions in your media enjoyment is on the table — truly a party crasher!

Put simply

Think of it like a restaurant where a server accidentally delivers a dish with a hidden explosive — the playlist file is that dish, and if the server (Winamp) isn't careful, it can lead to a big bang! This vulnerability resides in the IN_CDDA.dll component of Winamp, where a buffer overflow occurs due to improper handling of input from .m3u playlist files, allowing arbitrary code execution if crafted maliciously.

What to do

If an attacker successfully exploits this vulnerability, they could take control of your system, run malicious code, or even cause the application to crash. This means everything from stealing data to causing disruptions in your media enjoyment is on the table — truly a party crasher! To protect yourself, it’s wise to upgrade to the latest version of Winamp or switch to an alternative media player. Regularly audit your media files to ensure they’re safe and from trusted sources. 🚀 You’ve got this! Take these steps, and you’ll have your system secured in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17257 · 97.1th percentile
Published
2004-12-01T05:00Z
EPSS history
Timeline
  • 01 DEC 05:00Z
    Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a…
    cvelistv5