Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

WinAmp can run code from malicious MIDI files

CVE-2006-3228 · published 20 years ago
Summary

A specially crafted MIDI file can cause WinAmp (versions 2.90 through 5.23) to run unwanted code on a computer. This could let an attacker take control of the system. Avoid opening MIDI files from untrusted sources and upgrade to a version that fixes the issue or switch to a different media player.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nullsoft winamp <= 5.23
2.90
2.91
2.95
3.0
3.1
5.0
5.0.1
5.0.2
5.01
5.1
5.02
18 more version ranges
cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file.
Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
12% chance of attack within 30 days
Timeline
Published26 Jun 2006
Updated19 Oct 2026
First seen29 Sep 2026
Sources
CVE-2006-3228 · NVD
Track software like this
Free during beta