PatchTheCVEwinamp vulnerabilities and fixes
Recent CVEs affecting winamp, with upgrade or downgrade steps. 5 tracked.
winamp has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-12-27. Highest priority: CVE-2013-4695 (score 55/100).
- CVE-2017-10728 HIGH 7.8 DOWNGRADE Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via
- CVE-2017-10727 HIGH 7.8 DOWNGRADE Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via
- CVE-2017-10726 HIGH 7.8 DOWNGRADE Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via
- CVE-2017-10725 HIGH 7.3 DOWNGRADE Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a cra
- CVE-2013-4695 HIGH 7.8 DOWNGRADE Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
FAQ
How do I fix winamp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is winamp being exploited right now?
None of the tracked winamp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which winamp CVE should I patch first?
CVE-2013-4695 currently ranks highest (55/100): Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution.