CVE-2009-1831: Nullsoft Winamp

High severity, CVSS 9.3. EPSS: 36.3% chance of exploitation in the next 30 days.

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.

Affected products

• Nullsoft Winamp: up to and including 5.55; version 2.0 only; version 2.4 only; version 2.5e only; version 2.6x only; version 2.7x only; …

Published 2009-05-29. Last modified 2026-06-16.