PatchTheCVECVE-2006-6539: Multiple buffer overflows in Winamp Web Interface (Wawi) 7.5.13 and earlier (1) allow remote attackers to caus
CVE-2006-6539 is a high-severity flaw (CVSS 10.0) affecting winamp web interface. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Multiple buffer overflows in Winamp Web Interface (Wawi) 7.5.13 and earlier (1) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an (a) long username or a (b) crafted packet to the FindBasicAuth function in security.cpp, related to the /browse URI; and allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long path
Why this priority
- Critical severity
- EPSS top 5%: very likely to be exploited
A fixed release or distro patch exists.
Risk facts
| CVSS score | 10.0 (High) |
| EPSS exploit chance | 7.9% (top 5%) |
| CISA exploited list | No |
| Published | 2006-12-14 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2006-6539?
winamp web interface: upgrade to newer than 7.5.13. Exact commands for each OS are on this page.
Is CVE-2006-6539 being exploited?
CVE-2006-6539 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2006-6539 affect?
CVE-2006-6539 affects winamp web interface. Severity is high (CVSS 10.0). Multiple buffer overflows in Winamp Web Interface (Wawi) 7.5.13 and earlier (1) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an (a) long username or a (b) crafted packet to
How urgent is CVE-2006-6539?
Priority 59/100. Critical severity; EPSS top 5%: very likely to be exploited
Related CVEs
- CVE-2006-6514 LOW 3.5 UPGRADE Winamp Web Interface (Wawi) 7.5.13 and earlier uses an insufficient comparison to determine whether a director
- CVE-2006-6513 LOW 3.5 UPGRADE The CControl::Download function (/dl URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier allows remote auth
- CVE-2006-6512 LOW 3.5 UPGRADE Directory traversal vulnerability in the Browse function (/browse URI) in Winamp Web Interface (Wawi) 7.5.13 a