CVE-2006-0720: Nullsoft Winamp

High severity, CVSS 7.6. EPSS: 10.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.

Affected products

• Nullsoft Winamp: version 5.12 only; version 5.13 only

Published 2006-02-23. Last modified 2026-06-16.