CVE-2004-1396: Nullsoft Winamp

Low severity, CVSS 2.6. EPSS: 3.1% chance of exploitation in the next 30 days.

Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file.

Affected products

• Nullsoft Winamp: version 5.07 only

Published 2004-12-31. Last modified 2026-06-16.