← Back to CVEs

CVE-2013-4694

N/A

Description

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.

CVE Details

CVSS v3.1 ScoreN/A

Published4/16/2014

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

nullsoft:winamp

Weaknesses (CWE)

CWE-119

References

http://forums.winamp.com/showthread.php?t=364291(cve@mitre.org)

http://osvdb.org/94739(cve@mitre.org)

http://osvdb.org/94740(cve@mitre.org)

http://packetstormsecurity.com/files/122239/WinAmp-5.63-Buffer-Overflow.html(cve@mitre.org)

http://packetstormsecurity.com/files/122978(cve@mitre.org)

http://seclists.org/fulldisclosure/2013/Jul/4(cve@mitre.org)

http://www.exploit-db.com/exploits/26558(cve@mitre.org)

http://www.securityfocus.com/bid/60883(cve@mitre.org)

http://www.securitytracker.com/id/1030107(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/85399(cve@mitre.org)

https://www.rcesecurity.com/2013/07/winamp-v5-64-fixes-several-code-execution-vulnerabilities-cve-2013-4694-cve-2013-4695(cve@mitre.org)

http://forums.winamp.com/showthread.php?t=364291(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/94739(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/94740(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/122239/WinAmp-5.63-Buffer-Overflow.html(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/122978(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2013/Jul/4(af854a3a-2127-422b-91ae-364da2661108)

http://www.exploit-db.com/exploits/26558(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/60883(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1030107(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/85399(af854a3a-2127-422b-91ae-364da2661108)

https://www.rcesecurity.com/2013/07/winamp-v5-64-fixes-several-code-execution-vulnerabilities-cve-2013-4694-cve-2013-4695(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.