CVE-2006-6547: Buffer overflow in the readAA function in read_aa.cpp in Winamp iPod Plugin (ml_ipod) 2.00 p19 and earlier...

Security readout for executives and security teams

This is a legacy media-file parsing flaw in the Winamp iPod Plugin. A malicious Audible audiobook file with an overly long tag could crash Winamp or potentially run code as the user who opens it. Business urgency depends on whether this old plugin is still installed or used. Exposure is likely limited to endpoints that still have Winamp with the ml_ipod plugin 2.00 p19 or earlier and process .aa audiobook files. The source bundle does not identify broader affected products, package locations, or current supported versions. Prioritize as targeted legacy software risk. It is potentially high impact because code execution is reported, but likely narrow in exposure. Focus first on confirming whether the obsolete plugin exists in the environment. Mitigation focus: Inventory and remove unused Winamp ml_ipod installations.; Disable or restrict ml_ipod handling of untrusted .aa files.; Check vendor or project guidance for corrected ml_ipod versions..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.