Input Validation and Logic

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted (1) .IT or (2)…CVE-2007-1922Nullsoft · 4.8% likely

   CWE-20

2. Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function…CVE-2015-9268Nullsoft · 1.5% likely

   CWE-20

3. Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins director…CVE-2025-43715Nullsoft · CVSS 8.1 · 0.3% likely

   CWE-754

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.