CVE-2006-0476

CVE-2006-0476 describes a buffer overflow vulnerability in Nullsoft Winamp 5.12. This flaw allows remote attackers to execute arbitrary code by crafting a malicious playlist (.pls) file containing an excessively long filename in the "File1" field. With a CVSS score of 7.6, this vulnerability is considered highly severe due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite a high attack complexity. While not listed on CISA's KEV catalog, multiple public exploit modules exist, including Metasploit and ExploitDB entries, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.