CVE-2003-0765

CVE-2003-0765 describes a buffer overflow vulnerability in the IN_MIDI.DLL plugin (version 3.01 and earlier) used by Winamp 2.91. This flaw allows remote attackers to execute arbitrary code on a victim's system by crafting a malicious MIDI file with an excessively large "Track data size" value. The vulnerability has a CVSS score of 7.5, indicating high severity with network-based attacks and low complexity, potentially leading to partial confidentiality, integrity, and availability compromise. While not listed on CISA's KEV catalog, proof-of-concept exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.