CVE-2005-2310: Nullsoft Winamp

High severity, CVSS 9.3. EPSS: 13.1% chance of exploitation in the next 30 days.

Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.

Affected products

• Nullsoft Winamp: up to and including 5.093; version 5.03a only; version 5.09 only; version 5.091 only

Published 2005-07-19. Last modified 2026-06-16.