Nullsoft vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-42171 NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gainHigh 7.8 · Apr 24, 2026
• CVE-2025-43715 Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporaHigh 8.1 · Apr 16, 2025
• CVE-2015-9268 Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll.High 7.8 · Oct 1, 2018
• CVE-2013-4694 Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly executeHigh 7.5 · Apr 16, 2014
• CVE-2012-4045 Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RHigh 7.5 · Jul 22, 2012
• CVE-2011-4857 Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in anHigh 10 · Dec 16, 2011
• CVE-2011-3834 Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted valueHigh 9.3 · Dec 16, 2011
• CVE-2010-4372 Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of mHigh 9.3 · Dec 2, 2010
• CVE-2010-4371 Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box.High 9.3 · Dec 2, 2010
• CVE-2010-4370 Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a bHigh 9.3 · Dec 2, 2010
• CVE-2010-2586 Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of ConteHigh 9.3 · Dec 2, 2010
• CVE-2010-1523 Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary codeHigh 9.3 · Nov 5, 2010
• CVE-2010-3137 Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possibly remote attackers, to execute arbitraHigh 9.3 · Aug 26, 2010
• CVE-2009-4356 Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or High 9.3 · Dec 18, 2009
• CVE-2009-3996 Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute aHigh 9.3 · Dec 18, 2009
• CVE-2009-3997 Integer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer fiHigh 9.3 · Dec 18, 2009
• CVE-2009-3995 Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers toHigh 9.3 · Dec 18, 2009
• CVE-2009-1831 The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file,High 9.3 · May 29, 2009
• CVE-2009-0186 Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted descriptioHigh 9.3 · Mar 4, 2009
• CVE-2009-0263 Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large CoHigh 10 · Jan 23, 2009
• CVE-2008-3441 Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a TrojaHigh 7.5 · Aug 1, 2008
• CVE-2007-2498 libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file.High 9.3 · May 3, 2007
• CVE-2007-2180 Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted WMV file.High 7.1 · Apr 24, 2007
• CVE-2007-1921 LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that High 9.3 · Apr 10, 2007
• CVE-2007-1922 The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a craHigh 9.3 · Apr 10, 2007