CVE-2008-0065: Winamp Nullsoft Winamp

High severity, CVSS 10.0. EPSS: 61.3% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.

Affected products

• Winamp Nullsoft Winamp: version 5.5 only; version 5.21 only; version 5.51 only

Published 2008-01-22. Last modified 2026-06-16.