CVE-2012-4045

CVE-2012-4045 describes multiple heap-based buffer overflows in Winamp versions prior to 5.63 build 3235. These vulnerabilities, residing in the bmp.w5s component, can be triggered by specially crafted AVI files containing malicious strf chunks, UYVY video data, or decompressed TechSmith Screen Capture Codec data. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing remote attackers to execute arbitrary code on affected systems without authentication. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.