← Database

CVE-2006-5567

CRITICAL CVSS: 9.3 Published: 2006-10-27 Modified: 2026-06-16

Description

Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags.

Affected Platforms

Nullsoft Winamp

Weakness Type

NVD-CWE-Other

References