deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-3190
Published: 2006-06-23
Description: SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5252&w=2; http://securitytracker.com/id?1016322; http://www.vupen.com/english/advisories/2006/2403
CVE: CVE-2006-3191
Published: 2006-06-23
Description: Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1130; http://tpvgames.co.uk/mpcs/; http://www.securityfocus.com/archive/1/437631/100/0/threaded
CVE: CVE-2006-3192
Published: 2006-06-23
Description: PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the (1) ipath parameter in common.php and (2) unspecified vectors in ad.php.
CVSS Score: 7.5 (HIGH)
References: http://phpwebscripts.com/forum/viewtopic.php?t=1640; http://secunia.com/advisories/20744; http://www.osvdb.org/26673
CVE: CVE-2006-3193
Published: 2006-06-23
Description: Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms/ including (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, and (20) adminpanel/includes/mailinglist/dispxls.php.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/20768; http://sourceforge.net/project/shownotes.php?release_id=428062; http://www.osvdb.org/27233
CVE: CVE-2006-3194
Published: 2006-06-23
Description: Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20724; http://securityreason.com/securityalert/1135; http://www.securityfocus.com/archive/1/437716/100/0/threaded
CVE: CVE-2006-3195
Published: 2006-06-23
Description: Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the template parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1135; http://www.securityfocus.com/archive/1/437716/100/0/threaded; http://www.securityfocus.com/bid/18518
CVE: CVE-2006-3196
Published: 2006-06-23
Description: index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1135; http://www.securityfocus.com/archive/1/437716/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27323
CVE: CVE-2006-3197
Published: 2006-06-23
Description: Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains hexadecimal-encoded HTML.
CVSS Score: 4.3 (MEDIUM)
References: http://forums.invisionpower.com/index.php?showtopic=219126; http://secunia.com/advisories/20772; http://securityreason.com/securityalert/596
CVE: CVE-2006-2445
Published: 2006-06-23
Description: Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG_ON crash) by causing one CPU to attach a timer to a process that is exiting.
CVSS Score: 4.0 (MEDIUM)
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]3687; http://secunia.com/advisories/20703; http://secunia.com/advisories/20831
CVE: CVE-2006-2448
Published: 2006-06-23
Description: Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).
CVSS Score: 5.6 (MEDIUM)
References: http://secunia.com/advisories/20703; http://secunia.com/advisories/20831; http://secunia.com/advisories/20991
CVE: CVE-2006-3085
Published: 2006-06-23
Description: xt_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via an SCTP chunk with a 0 length.
CVSS Score: 7.8 (HIGH)
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.1; http://secunia.com/advisories/20703; http://secunia.com/advisories/20831
CVE: CVE-2006-2914
Published: 2006-06-23
Description: PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter to (1) postreply.php, (2) posting.php, (3) and pm/newpm.php in the deluxe/ directory, and (4) postreply.php, (5) posting.php, and (6) pm/newpm.php in the default/ directory.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20152; http://secunia.com/secunia_research/2006-44/advisory; http://securityreason.com/securityalert/1134
CVE: CVE-2006-2915
Published: 2006-06-23
Description: Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20152; http://secunia.com/secunia_research/2006-44/advisory; http://securityreason.com/securityalert/1134
CVE: CVE-2006-3198
Published: 2006-06-23
Description: Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://secunia.com/advisories/20787; http://secunia.com/advisories/20897; http://securityreason.com/securityalert/1133
CVE: CVE-2006-3199
Published: 2006-06-23
Description: Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://my.opera.com/community/forums/topic.dml?id=144635; http://securitytracker.com/id?1016359; http://www.critical.lt/?vuln/349
CVE: CVE-2006-3200
Published: 2006-06-23
Description: Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with a src tag containing a "File://" URI followed by an 8-bit character.  NOTE: some third parties were unable to verify this issue.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-06/0074.html; http://securityreason.com/securityalert/1132; http://www.securityfocus.com/archive/1/436839/100/200/threaded
CVE: CVE-2006-3201
Published: 2006-06-23
Description: Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/20809; http://securityreason.com/securityalert/1131; http://securitytracker.com/id?1016363
CVE: CVE-2006-3202
Published: 2006-06-23
Description: The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service (crash) by creating an IPv4-mapped IPv6 socket with the SO_TIMESTAMP socket option set, then sending an IPv4 packet through the socket.
CVSS Score: 4.9 (MEDIUM)
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-016.txt.asc; http://securitytracker.com/id?1016250; https://exchange.xforce.ibmcloud.com/vulnerabilities/27139
CVE: CVE-2006-2918
Published: 2006-06-23
Description: The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/20830; http://securityreason.com/securityalert/1139; http://securitytracker.com/id?1016371
CVE: CVE-2006-3203
Published: 2006-06-24
Description: The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://securityreason.com/securityalert/1138; http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt; http://www.securityfocus.com/archive/1/437875/100/0/threaded
CVE: CVE-2006-3204
Published: 2006-06-24
Description: Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext by obtaining the plaintext password, which is sent when logging in, and the ciphertext, which is set in the pass_env cookie.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1138; http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt; http://www.securityfocus.com/archive/1/437875/100/0/threaded
CVE: CVE-2006-3205
Published: 2006-06-24
Description: Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env parameters in a cookie, which comprise a persistent logon that does not vary across sessions.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1138; http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt; http://www.securityfocus.com/archive/1/437875/100/0/threaded
CVE: CVE-2006-3206
Published: 2006-06-24
Description: register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in the signature field, which is used to separate multiple records.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1138; http://www.securityfocus.com/archive/1/437875/100/0/threaded; http://securityreason.com/securityalert/1138
CVE: CVE-2006-3207
Published: 2006-06-24
Description: Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the id parameter, as demonstrated by injecting a Perl CGI script using "[NR]" sequences in the message parameter, then calling close.php with modified id and t_id parameters to chmod the script.  NOTE: this issue might be resultant from dynamic variable evaluation.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1138; http://www.securityfocus.com/archive/1/437875/100/0/threaded; http://securityreason.com/securityalert/1138
CVE: CVE-2006-3208
Published: 2006-06-24
Description: Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified "configuration fields" in (1) admin_chatconfig.php, (2) admin_configcss.php, (3) admin_config.php, or (4) admin_config2.php, which are stored as configuration settings.  NOTE: this issue can be exploited by remote attackers by leveraging other vulnerabilities in UPB.
CVSS Score: 6.5 (MEDIUM)
References: http://securityreason.com/securityalert/1138; http://www.kliconsulting.com/users/mbrooks/UPB_0-day.txt; http://www.securityfocus.com/archive/1/437875/100/0/threaded
CVE: CVE-2006-3209
Published: 2006-06-24
Description: The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges.  NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon installation
CVSS Score: 7.2 (HIGH)
References: http://securityreason.com/securityalert/1137; http://www.securityfocus.com/archive/1/436810/100/200/threaded; http://www.securityfocus.com/archive/1/436884/100/200/threaded
CVE: CVE-2006-3210
Published: 2006-06-24
Description: Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or ".." sequences in the (1) dir_abs_src parameter in (a) check_entry.php, (b) admin_album.php, (c) admin_image.php, and (d) admin_util.php; and the (2) dir_abs_admin_src parameter in admin_album.php and admin_image.php.  NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) attacks.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://rig.powerpulsar.com/#news; http://secunia.com/advisories/20771; http://securityreason.com/securityalert/1136
CVE: CVE-2006-3211
Published: 2006-06-24
Description: Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/20751; http://securityreason.com/securityalert/1141; http://www.securityfocus.com/archive/1/438008/100/0/threaded
CVE: CVE-2006-3212
Published: 2006-06-24
Description: Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the (1) name, (2) email, (3) add, and (4) wName parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20751; http://www.securityfocus.com/bid/18591; http://www.vupen.com/english/advisories/2006/2488
CVE: CVE-2006-3213
Published: 2006-06-24
Description: SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yeni_host.asp.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1140; http://securitytracker.com/id?1016341; http://www.securityfocus.com/archive/1/437635/100/0/threaded
CVE: CVE-2006-3214
Published: 2006-06-24
Description: Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allows remote attackers to cause a denial of service (product "stop") via unspecified vectors involving "unexpected requests".
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20700; http://securitytracker.com/id?1016338; http://www.hitachi-support.com/security_e/vuls_e/HS06-012_e/index-e.html
CVE: CVE-2006-3215
Published: 2006-06-24
Description: Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.
CVSS Score: 7.5 (HIGH)
References: http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm; http://secunia.com/advisories/20756; http://www.osvdb.org/26737
CVE: CVE-2006-3216
Published: 2006-06-24
Description: Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.
CVSS Score: 5.0 (MEDIUM)
References: http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm; http://secunia.com/advisories/20756; http://www.osvdb.org/26738
CVE: CVE-2006-3217
Published: 2006-06-24
Description: JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/20759; http://securityreason.com/securityalert/1145; http://www.securityfocus.com/archive/1/437937/100/0/threaded
CVE: CVE-2006-3218
Published: 2006-06-24
Description: SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1144; http://www.securityfocus.com/archive/1/437118/100/100/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27143
CVE: CVE-2006-3219
Published: 2006-06-24
Description: SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1143; http://www.securityfocus.com/archive/1/437114/100/100/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27138
CVE: CVE-2006-3220
Published: 2006-06-24
Description: SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1142; http://www.securityfocus.com/archive/1/437115/100/100/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/27141
CVE: CVE-2006-3221
Published: 2006-06-24
Description: SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20765; http://www.securityfocus.com/bid/18592; http://www.vupen.com/english/advisories/2006/2486
CVE: CVE-2006-3222
Published: 2006-06-24
Description: The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode.
CVSS Score: 5.0 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-July/000921.html; http://secunia.com/advisories/20720; http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html
CVE: CVE-2006-2196
Published: 2006-06-26
Description: Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/20778; http://secunia.com/advisories/20834; http://www.debian.org/security/2006/dsa-1102
CVE: CVE-2006-2310
Published: 2006-06-26
Description: BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as (1) con, (2) aux, (3) com1, and (4) com2.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19180; http://secunia.com/secunia_research/2006-18/advisory; http://www.securityfocus.com/bid/18624
CVE: CVE-2006-2311
Published: 2006-06-26
Description: Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1) .cfm or (2) .cfml file, which reflects the result in the default error page.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19180; http://secunia.com/secunia_research/2006-18/advisory; http://www.securityfocus.com/bid/18623
CVE: CVE-2006-3224
Published: 2006-06-26
Description: Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop.  NOTE: it could be argued that this is not a vulnerability, unless it interferes with the operation of the system outside of the scope of Safari itself.
CVSS Score: 5.4 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046150.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/26558; http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046150.html
CVE: CVE-2006-3225
Published: 2006-06-26
Description: Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/20835; http://securitytracker.com/id?1016378; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102479-1
CVE: CVE-2006-3226
Published: 2006-06-26
Description: Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20816; http://securityreason.com/securityalert/1157; http://securitytracker.com/id?1016369
CVE: CVE-2006-3227
Published: 2006-06-26
Description: Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, which could be stripped by Internet Explorer to render legible text, but not when using other browsers. NOTE: there has been significant discussion about this issue, and as of 20060625, it is not clear where the responsibility for this issue lies, although it might be due to vagueness within the associated standards.  NOTE: this might only be exploitable with certain encodings.
CVSS Score: 2.6 (LOW)
References: http://ha.ckers.org/blog/20060621/malformed-ascii-bypasses-filters/; http://ha.ckers.org/blog/20060621/us-ascii-xss-part-2; http://www.osvdb.org/28376
CVE: CVE-2006-3228
Published: 2006-06-26
Description: Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file.
CVSS Score: 9.3 (HIGH)
References: http://forums.winamp.com/showthread.php?threadid=248100; http://secunia.com/advisories/20722; http://www.attrition.org/pipermail/vim/2006-June/000892.html