Lucene search

K
saintSAINT CorporationSAINT:D35667B4A903B85BD48AA32D5DBDC60C
HistoryJan 31, 2006 - 12:00 a.m.

Winamp playlist file buffer overflow

2006-01-3100:00:00
SAINT Corporation
download.saintcorporation.com
7

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.725 High

EPSS

Percentile

98.0%

Added: 01/31/2006
CVE: CVE-2006-0476
BID: 16410
OSVDB: 22789

Background

Winamp is a media player for Windows.

Problem

A buffer overflow in Winamp allows code execution when a specially crafted playlist file is opened.

Resolution

Upgrade to Winamp 5.13 or higher.

References

<http://secunia.com/advisories/18649/&gt;

Limitations

Exploit requires user to choose Play -> File from the Winamp menu and enter the exploit URL. Exploit works on Winamp 5.12.

Platforms

Windows

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.725 High

EPSS

Percentile

98.0%