CVE-2005-3188
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2005-3188
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending in .wma or (2) a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Winamp畸形m3u/pls文件字段值导致执行任意指令漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Winamp是一款流行的Windows媒体播放器，支持多种音频/视频文件格式。 Winamp对播放列表文件处理存在缓冲区溢出漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。如果m3u或pls文件中包含了以.wma为后缀的目标文件名并且某个信息字段被赋给了畸形的值时，会导致Winamp崩溃，允许攻击者控制EAX寄存器执行任意指令。远程攻击者可以通过诱骗用户访问恶意的页面或链接来利用这个漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2005-3188
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2005-3188
请登录查看更多情报信息。
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378third-party-advisoryx_refsource_IDEFENSE
- https://nvd.nist.gov/vuln/detail/CVE-2005-3188
Same Patch Batch · n/a · 2006-02-04 · 24 CVEs total
| CVE-2006-0548 | Oracle Database Oracle Text组件SQL注入漏洞 | |
| CVE-2006-0538 | CipherTrust IronMail远程拒绝服务漏洞 | |
| CVE-2006-0537 | Kinesphere Corporation Exchange POP3远程RCPT TO缓冲区溢出漏洞 | |
| CVE-2006-0536 | NeoMail neomail.pl 跨站脚本攻击漏洞 | |
| CVE-2006-0535 | Community Server多个跨站脚本攻击漏洞 | |
| CVE-2006-0534 | CyberShop Ultimate E-commerce多个跨站脚本攻击漏洞 | |
| CVE-2006-0533 | cPanel的webmailaging.cgi 跨站脚本攻击漏洞 | |
| CVE-2006-0532 | SoftMaker Shop多个跨站脚本攻击漏洞 | |
| CVE-2006-0531 | Sun Java System Access Manager本地绕过验证漏洞 | |
| CVE-2006-0551 | Oracle Data Pump Metadata API SQL注入漏洞 | |
| CVE-2006-0550 | Oracle客户端缓冲区溢出漏洞 | |
| CVE-2006-0549 | Oracle Database SQL注入漏洞 | |
| CVE-2006-0552 | Oracle DBMS绕过登录访问控制漏洞 | |
| CVE-2006-0547 | Oracle Database AUTH_ALTER_SESSION属性安全绕过和任意SQL语句执行漏洞 | |
| CVE-2006-0546 | egeinternet.com 'index.php'key参数未明漏洞 | |
| CVE-2006-0545 | UBB.Threads Showflat.PHP SQL注入漏洞 | |
| CVE-2006-0544 | Microsoft Internet Explorer URLMon.DLL拒绝服务漏洞 | |
| CVE-2006-0543 | Cerulean Trillian AIM消息拒绝服务漏洞 | |
| CVE-2006-0542 | GuestBookHost 多个SQL注入漏洞 | |
| CVE-2006-0541 | Tachyondecay Vanilla Guestbook 多个跨站脚本攻击漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2005-3188
No comments yet