Vulnerability record · CVE-2005-3188 · published 31 December 2005

CVE-2005-3188: Nullsoft winamp vulnerability

Nullsoft · Winamp

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.

7.6 CVSS 2.0 High EPSS 7.4% · top 5.8%

7.6CVSS 2.0 base score

7.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

14References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Winamp Nullsoft

References

Link	Tags
http://securityreason.com/securityalert/397
http://securitytracker.com/id?1015565	Patch
http://securitytracker.com/id?1015621	Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378	ExploitPatchVendor Advisory
http://www.osvdb.org/22975	Patch
http://www.securityfocus.com/bid/16462
https://exchange.xforce.ibmcloud.com/vulnerabilities/24417
http://securityreason.com/securityalert/397
http://securitytracker.com/id?1015565	Patch
http://securitytracker.com/id?1015621	Vendor Advisory
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378	ExploitPatchVendor Advisory
http://www.osvdb.org/22975	Patch
http://www.securityfocus.com/bid/16462
https://exchange.xforce.ibmcloud.com/vulnerabilities/24417

Track CVE-2005-3188 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-4857Nullsoft winamp memory buffer overflow vulnerabilityHeap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message…EPSS 4.7%16 Dec 2011 10.0CVE-2009-0263Nullsoft winamp memory buffer overflow vulnerabilityMultiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1)…EPSS 17%23 Jan 2009 10.0CVE-2004-1119Nullsoft winamp vulnerabilityStack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary c…EPSS 17%10 Jan 2005 9.3CVE-2011-3834Nullsoft winamp vulnerabilityMultiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a cr…EPSS 5.1%16 Dec 2011 9.3CVE-2010-4372Nullsoft winamp vulnerabilityInteger overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allo…EPSS 2.8%2 Dec 2010 9.3CVE-2010-4370Nullsoft winamp vulnerabilityMultiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that t…EPSS 5.1%2 Dec 2010 9.3CVE-2010-4371Nullsoft winamp memory buffer overflow vulnerabilityBuffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment bo…EPSS 6.1%2 Dec 2010 9.3CVE-2010-2586Nullsoft winamp vulnerabilityMultiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Tab…EPSS 5.5%2 Dec 2010

Source: NIST National Vulnerability Database (record CVE-2005-3188), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.