CVE-2006-5567

None

CVSS

—

EPSS

14.5%

Published

Oct 27, 2006

CISA due date

—

The record

Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags.

Affected packages

Ecosystem	Package	Introduced	Fixed