CVE-2002-0547: Nullsoft Winamp

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.

Affected products

• Nullsoft Winamp: up to and including 2.79

Published 2002-07-03. Last modified 2026-06-16.