CVE-2017-10726
HighSummary
Winamp 5.666 Build 3516(x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue relates to the use of data from a faulting address as a return value.
Risk Assessment
This vulnerability could lead to serious consequences, including system takeover or disruption of service. Organizations should be aware of the risks associated with opening unknown multimedia files.
Recommendation
It is recommended to update Winamp to the latest version and avoid opening .flv files from unknown sources. Additionally, consider implementing extra security measures such as antivirus scanners.
Other vulnerabilities in Winamp 5.666 Build 3516(x86)
See all- CVE-2017-10728High
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to 'Error Code (0xe06d7363)'.
- CVE-2017-10727High
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue relates to branch selection control associated with the faulting address.
- CVE-2017-10725High
Winamp 5.666 Build 3516 (x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue is related to code flow control concerning the faulting address.
Original NVD description (English source)
Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951."