CVE-2006-0720

CVE-2006-0720 describes a stack-based buffer overflow vulnerability in Nullsoft Winamp versions 5.12 and 5.13. This flaw allows an attacker to cause a denial of service (crash) and potentially execute arbitrary code through a specially crafted .m3u file, which triggers an incorrect strncpy function call when the player pauses or stops. The vulnerability has a CVSS score of 7.6, indicating high severity with a network attack vector, high attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age, its FAUCET Risk Score is 94/100, suggesting a significant risk. While not listed on the CISA KEV catalog or Hot List, exploit code for this vulnerability is publicly available on ExploitDB. There is no evidence of active exploitation, and it has received minimal community discussion or media coverage.