CVE-2014-3442
medium
CVSS v3
—
CVSS v4 NEW
—
VIR risk
5.3
Description
Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
Winamp - '.flv' File Processing Memory Corruption
Source code queued for fetch — refresh in a moment.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| nullsoft | winamp | {"endIncluding":"5.666"} | |
| nullsoft | winamp | 5.0 | |
| nullsoft | winamp | 5.01 | |
| nullsoft | winamp | 5.02 | |
| nullsoft | winamp | 5.2 | |
| nullsoft | winamp | 5.3 | |
| nullsoft | winamp | 5.03 | |
| nullsoft | winamp | 5.04 | |
| nullsoft | winamp | 5.05 | |
| nullsoft | winamp | 5.5 | |
| nullsoft | winamp | 5.06 | |
| nullsoft | winamp | 5.07 | |
| nullsoft | winamp | 5.08c | |
| nullsoft | winamp | 5.08d | |
| nullsoft | winamp | 5.08e | |
| nullsoft | winamp | 5.09 | |
| nullsoft | winamp | 5.11 | |
| nullsoft | winamp | 5.12 | |
| nullsoft | winamp | 5.13 | |
| nullsoft | winamp | 5.21 | |
| nullsoft | winamp | 5.22 | |
| nullsoft | winamp | 5.23 | |
| nullsoft | winamp | 5.24 | |
| nullsoft | winamp | 5.31 | |
| nullsoft | winamp | 5.32 | |
| nullsoft | winamp | 5.33 | |
| nullsoft | winamp | 5.34 | |
| nullsoft | winamp | 5.35 | |
| nullsoft | winamp | 5.36 | |
| nullsoft | winamp | 5.51 | |
| nullsoft | winamp | 5.52 | |
| nullsoft | winamp | 5.53 | |
| nullsoft | winamp | 5.54 | |
| nullsoft | winamp | 5.55 | |
| nullsoft | winamp | 5.56 | |
| nullsoft | winamp | 5.57 | |
| nullsoft | winamp | 5.58 | |
| nullsoft | winamp | 5.59 | |
| nullsoft | winamp | 5.61 | |
| nullsoft | winamp | 5.63 | |
| nullsoft | winamp | 5.091 | |
| nullsoft | winamp | 5.093 | |
| nullsoft | winamp | 5.094 | |
| nullsoft | winamp | 5.111 | |
| nullsoft | winamp | 5.112 | |
| nullsoft | winamp | 5.531 | |
| nullsoft | winamp | 5.541 | |
| nullsoft | winamp | 5.551 | |
| nullsoft | winamp | 5.552 | |
| nullsoft | winamp | 5.572 | |
| nullsoft | winamp | 5.581 | |
| nullsoft | winamp | 5.623 | |
References
CWEs
CWE-119
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.