Unrated severityNVD Advisory· Published Aug 17, 2007· Updated Jun 16, 2026

CVE-2007-4392

Description

Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself.

Affected products

Nullsoft/Winamp
cpe:2.3:a:nullsoft:winamp:5.35:*:*:*:*:*:*:*
Winamp/Winampllm-fuzzy
Range: 5.35

Patches

Vulnerability mechanics

References

morph3us.org/advisories/20070730-winamp-5.35.txtnvd
securityreason.com/securityalert/3040nvd
www.securityfocus.com/archive/1/475161/100/200/threadednvd
www.securityfocus.com/archive/1/475183/100/200/threadednvd
www.securityfocus.com/archive/1/475260/100/200/threadednvd
www.securityfocus.com/archive/1/475489/100/200/threadednvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15504nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000