CVE-2002-0907: Nullsoft Shoutcast Server

High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days.

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".

Affected products

• Nullsoft Shoutcast Server: version 1.8.9 only

Published 2002-10-04. Last modified 2026-06-16.