CVE-2007-1921: Nullsoft Winamp

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that contains a value that is used as an offset, which triggers memory corruption.

Affected products

• Nullsoft Winamp: version 5.33 only

Published 2007-04-10. Last modified 2026-06-16.