CVE-2004-1396: Low severity Nullsoft Winamp vulnerability
Published Dec 31, 2004
·Updated
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file.
Affected Software
1 affected component
Nullsoft Winamp=5.07
Event History
Dec 31, 2004
CVE Published
05:00 AM
Feb 12, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1396?
CVE-2004-1396 has a low severity rating as it leads to denial of service but does not allow for remote code execution.
2
How do I fix CVE-2004-1396?
To fix CVE-2004-1396, upgrade to a version of Winamp that is not affected by this vulnerability.
3
Which versions of Winamp are affected by CVE-2004-1396?
Winamp 5.07 and possibly other versions are affected by CVE-2004-1396.
4
What types of files can exploit CVE-2004-1396?
CVE-2004-1396 can be exploited using invalid mp4 or m4a playlist files, as well as invalid .nsv or .nsa files.
5
What effect does CVE-2004-1396 have on the application?
CVE-2004-1396 can cause the application to crash or consume excessive CPU resources.