CVE-2009-4356: Integer Overflow
Published Dec 18, 2009
·Updated
Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file.
Affected Software
96 affected components
Nullsoft Winamp<=5.56
Nullsoft Winamp=0.20a
Nullsoft Winamp=0.92
Nullsoft Winamp=1.006
Nullsoft Winamp=1.90
Nullsoft Winamp=2.0
Nullsoft Winamp=2.4
Nullsoft Winamp=2.5e
Nullsoft Winamp=2.6
Nullsoft Winamp=2.6x
Nullsoft Winamp=2.7x
Nullsoft Winamp=2.9
Nullsoft Winamp=2.10
Nullsoft Winamp=2.24
Nullsoft Winamp=2.50
Nullsoft Winamp=2.60
Nullsoft Winamp=2.60
Nullsoft Winamp=2.60
Nullsoft Winamp=2.61
Nullsoft Winamp=2.61
Nullsoft Winamp=2.62
Nullsoft Winamp=2.62
Nullsoft Winamp=2.64
Nullsoft Winamp=2.64
Nullsoft Winamp=2.65
Nullsoft Winamp=2.70
Nullsoft Winamp=2.70
Nullsoft Winamp=2.71
Nullsoft Winamp=2.72
Nullsoft Winamp=2.73
Nullsoft Winamp=2.73
Nullsoft Winamp=2.74
Nullsoft Winamp=2.75
Nullsoft Winamp=2.76
Nullsoft Winamp=2.77
Nullsoft Winamp=2.78
Nullsoft Winamp=2.79
Nullsoft Winamp=2.80
Nullsoft Winamp=2.81
Nullsoft Winamp=2.90
Nullsoft Winamp=2.91
Nullsoft Winamp=2.92
Nullsoft Winamp=2.95
Nullsoft Winamp=3.0
Nullsoft Winamp=3.1
Nullsoft Winamp=5.0
Nullsoft Winamp=5.0.1
Nullsoft Winamp=5.0.2
Nullsoft Winamp=5.01
Nullsoft Winamp=5.1
Nullsoft Winamp=5.1
Nullsoft Winamp=5.02
Nullsoft Winamp=5.2
Nullsoft Winamp=5.3
Nullsoft Winamp=5.03
Nullsoft Winamp=5.03a
Nullsoft Winamp=5.04
Nullsoft Winamp=5.05
Nullsoft Winamp=5.5
Nullsoft Winamp=5.06
Nullsoft Winamp=5.07
Nullsoft Winamp=5.08
Nullsoft Winamp=5.08-c
Nullsoft Winamp=5.08-d
Nullsoft Winamp=5.08-e
Nullsoft Winamp=5.08c
Nullsoft Winamp=5.08d
Nullsoft Winamp=5.08e
Nullsoft Winamp=5.09
Nullsoft Winamp=5.11
Nullsoft Winamp=5.12
Nullsoft Winamp=5.13
Nullsoft Winamp=5.21
Nullsoft Winamp=5.22
Nullsoft Winamp=5.23
Nullsoft Winamp=5.24
Nullsoft Winamp=5.31
Nullsoft Winamp=5.32
Nullsoft Winamp=5.33
Nullsoft Winamp=5.34
Nullsoft Winamp=5.35
Nullsoft Winamp=5.36
Nullsoft Winamp=5.51
Nullsoft Winamp=5.52
Nullsoft Winamp=5.53
Nullsoft Winamp=5.54
Nullsoft Winamp=5.55
Nullsoft Winamp=5.091
Nullsoft Winamp=5.093
Nullsoft Winamp=5.094
Nullsoft Winamp=5.111
Nullsoft Winamp=5.112
Nullsoft Winamp=5.531
Nullsoft Winamp=5.541
Nullsoft Winamp=5.551
Nullsoft Winamp=5.552
Remediation
Patch Available
Event History
Dec 18, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4356?
CVE-2009-4356 is considered critical due to its potential to allow remote code execution.
2
How do I fix CVE-2009-4356?
To fix CVE-2009-4356, users should update Winamp to version 5.57 or later.
3
What types of files are affected by CVE-2009-4356?
CVE-2009-4356 affects JPEG and PNG files embedded within MP3 files.
4
Who is affected by CVE-2009-4356?
CVE-2009-4356 affects users of Winamp versions prior to 5.57.
5
What are the main vulnerabilities exploited in CVE-2009-4356?
CVE-2009-4356 exploits multiple integer overflows in the jpeg.w5s and png.w5s filters.