CVE-2005-2310: Buffer Overflow
Published Jul 19, 2005
·Updated
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.
Affected Software
4 affected components
Nullsoft Winamp=5.09
Nullsoft Winamp<=5.093
Nullsoft Winamp=5.03a
Nullsoft Winamp=5.091
Event History
Jul 19, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What are the affected versions of Winamp for CVE-2005-2310?
CVE-2005-2310 affects Winamp versions 5.03a, 5.09, 5.091, and all versions prior to 5.094.
2
What type of vulnerability is CVE-2005-2310?
CVE-2005-2310 is a buffer overflow vulnerability that can allow remote attackers to execute arbitrary code.
3
How can I mitigate the risks associated with CVE-2005-2310?
To mitigate risks for CVE-2005-2310, it is recommended to upgrade to Winamp version 5.094 or later.
4
What can attackers exploit in CVE-2005-2310?
Attackers can exploit CVE-2005-2310 by crafting an MP3 file with a long ID3v2 tag to trigger the buffer overflow.
5
Is CVE-2005-2310 easily exploitable?
Yes, CVE-2005-2310 can be easily exploited by sending a specially crafted MP3 file to the target user.