CVE-2000-0049: Nullsoft Winamp

High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days.

Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.

Affected products

• Nullsoft Winamp: version 2.0 only; version 2.10 only

Published 2000-01-04. Last modified 2026-06-16.