PT-2017-11448

CVE-2017-10727

·

Published

2017-07-05

·

Updated

2017-07-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Winamp version 5.666 Build 3516(x86)
Description The issue might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Branch Selection starting at in mp3!DeleteAudioDecoder+0x000000000000762f."
Recommendations For Winamp version 5.666 Build 3516(x86), consider avoiding the use of .flv files until a fix is available, and restrict access to potentially vulnerable audio decoder functions to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾