CVE-2007-2498: Critical severity Nullsoft Winamp vulnerability
Published May 4, 2007
·Updated
libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.
Affected Software
10 affected components
Nullsoft Winamp=5.2
Nullsoft Winamp=5.3
Nullsoft Winamp=5.21
Nullsoft Winamp=5.22
Nullsoft Winamp=5.23
Nullsoft Winamp=5.24
Nullsoft Winamp=5.31
Nullsoft Winamp=5.32
Nullsoft Winamp=5.33
Nullsoft Winamp=5.34
Event History
May 4, 2007
CVE Published
12:19 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2498?
CVE-2007-2498 is classified as critical due to its ability to allow remote code execution.
2
How do I fix CVE-2007-2498?
To mitigate CVE-2007-2498, users should upgrade to the latest version of Winamp that is not affected by this vulnerability.
3
Which versions of Winamp are affected by CVE-2007-2498?
CVE-2007-2498 affects Winamp versions from 5.21 to 5.34.
4
What type of attack does CVE-2007-2498 facilitate?
CVE-2007-2498 allows user-assisted remote attackers to execute arbitrary code through malicious .MP4 files.
5
Are there any user actions that can exploit CVE-2007-2498?
Yes, opening a specially crafted .MP4 file is required for exploiting CVE-2007-2498.