Monday, February 27, 2006 10:08 AM cmosby

SANS - Internet Storm Center - Winamp buffer overflow - Update to 5.2

Winamp buffer overflow

Published: 2006-02-25,
Last Updated: 2006-02-25 15:33:14 UTC by Brian Granier (Version: 1)

We have been monitoring a reported flaw with Winamp 5.12 and 5.13. A buffer overflow condition with a playlist containing a long file name can cause the application to crash at best and execute arbitrary code at worst. To date, we are not aware of any POC that uses this vulnerability sucesfully for malicious purposes. This problem is fixed in Winamp 5.2 so users are advised to update. More details about this issue can be found at http://secunia.com/advisories/18848.

SANS - Internet Storm Center - Cooperative Cyber Threat Monitor And Alert System.

Filed under:

Comments

No Comments