← Database

CVE-2009-3997

CRITICAL CVSS: 9.3 Published: 2009-12-18 Modified: 2026-06-16

Description

Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow.

Affected Platforms

Nullsoft Winamp

Weakness Type

CWE-189

References