Winamp < 5.5 libFLAC Integer Overflow

Medium Nessus Network Monitor Plugin ID 4243


The remote host is vulnerable to a buffer overflow.


The remote host is running Winamp, a multi-media software application. This version of Winamp includes a library that is reported to be prone to a remote integer overflow. An attacker exploiting this flaw would need to be able to convince a Winamp user to open a file with malformed FLAC data. Successful exploitation would result in the attacker executing arbitrary code on the remote client system.


Upgrade to version 5.5 or higher.

See Also

Plugin Details

Severity: Medium

ID: 4243

Family: Generic

Published: 2007/10/12

Modified: 2018/09/16

Dependencies: 1735, 8314

Risk Information

Risk Factor: Medium


Base Score: 4.4

Temporal Score: 3.3

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C


Base Score: 4.8

Temporal Score: 4.1


Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:nullsoft:winamp

Reference Information

CVE: CVE-2007-4619

BID: 26042