CVE-2005-3188

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securityreason.com/securityalert/397
http://securitytracker.com/id?1015565Patch
http://securitytracker.com/id?1015621Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378Exploit, Patch, Vendor Advisory
http://www.osvdb.org/22975Patch
http://www.securityfocus.com/bid/16462
https://exchange.xforce.ibmcloud.com/vulnerabilities/24417
http://securityreason.com/securityalert/397
http://securitytracker.com/id?1015565Patch
http://securitytracker.com/id?1015621Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378Exploit, Patch, Vendor Advisory
http://www.osvdb.org/22975Patch
http://www.securityfocus.com/bid/16462
https://exchange.xforce.ibmcloud.com/vulnerabilities/24417

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-31895.0Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequen CVE-2005-31907.5Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to e CVE-2005-31915.1Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream CVE-2005-31927.5Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, a CVE-2005-31935.1Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier,CVE-2005-31945.1Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code v CVE-2005-31964.6Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device CVE-2005-31977.2Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code CVE-2005-31984.6Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection is enabled, via certa CVE-2005-31997.5Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL commands, possibly vi CVE-2005-32004.3Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web CVE-2005-32017.5SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled,