Unrated severityNVD Advisory· Published Oct 27, 2006· Updated Apr 23, 2026
CVE-2006-5567
CVE-2006-5567
Description
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- labs.idefense.com/intelligence/vulnerabilities/display.phpnvdPatchVendor Advisory
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvdPatchVendor Advisory
- secunia.com/advisories/22580nvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- www.securityfocus.com/bid/20744nvdPatch
- www.kb.cert.org/vuls/id/449092nvdUS Government Resource
- securitytracker.com/idnvd
- www.vupen.com/english/advisories/2006/4196nvd
- www.winamp.com/player/version_history.phpnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29804nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29807nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15686nvd
News mentions
0No linked articles in our index yet.