CVE-2001-0490: Nullsoft Winamp

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.

Affected products

• Nullsoft Winamp: version 2.6x only; version 2.7x only

Published 2001-06-27. Last modified 2026-06-16.