Vulnerability Name:

CVE-2003-1273 (CCN-10982)

Assigned:2003-01-04
Published:2003-01-04
Updated:2017-07-11
Summary:Winamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a playlist name that contains some non-English characters, e.g. Cyrillic characters.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: BUGTRAQ
Type: Vendor Advisory
20030104 WinAmp v.3.0: buffer overflow

Source: CCN
Type: BugTraq Mailing List, Sat Jan 04 2003 - 07:00:47 CST
WinAmp v.3.0: buffer overflow

Source: MITRE
Type: CNA
CVE-2003-1273

Source: CCN
Type: OSVDB ID: 34427
Winamp b4s Handling Non-english Character DoS

Source: BID
Type: UNKNOWN
6517

Source: CCN
Type: BID-6517
NullSoft Winamp B4S File Cyrillic Playlist Field Denial Of Service Vulnerability

Source: CCN
Type: Winamp Web site
WINAMP.COM

Source: XF
Type: UNKNOWN
winamp-b4s-playlistname-dos(10982)

Source: XF
Type: UNKNOWN
winamp-b4s-playlistname-dos(10982)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:nullsoft:winamp:3.0:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:nullsoft:winamp:3.0:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    nullsoft winamp 3.0
    nullsoft winamp 3.0