CVE-2006-0720: Buffer Overflow
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0720?
CVE-2006-0720 has a significant severity level due to its potential for denial of service and remote code execution.
How do I fix CVE-2006-0720?
To fix CVE-2006-0720, update to a patched version of Winamp, which resolves this buffer overflow vulnerability.
What is a buffer overflow in relation to CVE-2006-0720?
In CVE-2006-0720, a buffer overflow occurs due to an incorrect strncpy function call when processing crafted .m3u files.
Who is affected by CVE-2006-0720?
CVE-2006-0720 affects users of Nullsoft Winamp versions 5.12 and 5.13.
Can CVE-2006-0720 be exploited remotely?
CVE-2006-0720 requires user assistance, meaning that an attacker must convince the user to open a malicious .m3u file.