CVE-2007-2498: Nullsoft Winamp

High severity, CVSS 9.3. EPSS: 10.2% chance of exploitation in the next 30 days.

libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file. NOTE: some of these details are obtained from third party information.

Affected products

• Nullsoft Winamp: version 5.2 only; version 5.3 only; version 5.21 only; version 5.22 only; version 5.23 only; version 5.24 only; …

Published 2007-05-04. Last modified 2026-06-16.