CVE-2006-3535: Nullsoft Shoutcast Dsp

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.7 allows remote attackers to read arbitrary files via unspecified vectors that are a "slight variation" of CVE-2006-3534.

Affected products

• Nullsoft Shoutcast Dsp: version 1.9.5 only; version 1.9.6 only

Published 2006-07-12. Last modified 2026-06-16.