CVE-2008-0065

CVE-2008-0065 describes multiple stack-based buffer overflows in Winamp versions 5.21, 5.5, and 5.51, specifically within the in_mp3.dll component. This vulnerability allows remote attackers to execute arbitrary code by crafting long artist or name tags in Ultravox streaming metadata, which leads to buffer overflows during stream title construction. With a CVSS score of 10.0, this critical vulnerability has a low attack complexity and requires no authentication, enabling complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, a Metasploit module and an ExploitDB entry confirm the existence of public exploit code, though there is no evidence of active exploitation or significant community discussion.