Search Results (62 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2003-0765 1 Nullsoft 1 Winamp 2025-04-03 N/A
The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value.
CVE-2002-2412 1 Nullsoft 1 Winamp 2025-04-03 N/A
Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.