CVE-2017-10727
HighSummary
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue relates to branch selection control associated with the faulting address.
Risk Assessment
This vulnerability could lead to serious consequences, including system takeover or disruption of service. Organizations should be aware of the risks associated with using this version of Winamp.
Recommendation
It is recommended to update Winamp to the latest version or avoid opening .flv files from untrusted sources. Additionally, monitoring systems for suspicious activity is advisable.
Other vulnerabilities in Winamp 5.666 Build 3516 (x86)
See all- CVE-2017-10728High
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to 'Error Code (0xe06d7363)'.
- CVE-2017-10726High
Winamp 5.666 Build 3516(x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue relates to the use of data from a faulting address as a return value.
- CVE-2017-10725High
Winamp 5.666 Build 3516 (x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue is related to code flow control concerning the faulting address.
Original NVD description (English source)
Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Branch Selection starting at in_mp3!DeleteAudioDecoder+0x000000000000762f."