← Database

CVE-2004-1150

MEDIUM CVSS: 5.1 Published: 2004-12-31 Modified: 2026-06-16

Description

Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.

Affected Platforms

Nullsoft Winamp

Weakness Type

NVD-CWE-Other

References