CVE-2009-1831

CVE-2009-1831 describes a critical vulnerability in Nullsoft Winamp before version 5.552, specifically within the Modern Skins Support module (gen_ff.dll). This flaw allows remote attackers to execute arbitrary code by supplying a specially crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a subsequent stack-based buffer overflow. With a CVSS score of 9.3 (Critical), the vulnerability is easily exploitable over the network with medium attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not currently on CISA's KEV catalog or actively exploited, multiple public exploit modules exist, including a Metasploit module and several Proof-of-Concept exploits on ExploitDB, indicating a high potential for exploitation. Despite its severity and exploit availability, there is minimal community discussion or media coverage surrounding this CVE.