CVE-2017-10725
HighSummary
Winamp 5.666 Build 3516 (x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue is related to code flow control concerning the faulting address.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system or disruption of its operation, posing a serious security threat to the organization.
Recommendation
It is recommended to update Winamp to the latest version to mitigate the risk associated with this vulnerability and to avoid opening unknown .flv files.
Other vulnerabilities in Winamp 5.666 Build 3516 (x86)
See all- CVE-2017-10728High
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to 'Error Code (0xe06d7363)'.
- CVE-2017-10727High
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue relates to branch selection control associated with the faulting address.
- CVE-2017-10726High
Winamp 5.666 Build 3516(x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue relates to the use of data from a faulting address as a return value.
Original NVD description (English source)
Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at in_flv!winampGetInModule2+0x00000000000009a8."