CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

Heap overflow

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

Integer overflow

Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...

CVE-2011-3834

Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...

CVE-2011-3834

Winamp

CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-3834

Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...

CVE-2011-4857

CVE-2011-4857 describes a heap-based buffer overflow in Winamp’s in_mod.dll plugin (pre-5.623) triggered by crafted Impulse Tracker (IT) file data, enabling remote code execution. The issue is tied to parsing/handling in IT data and relates to the in_mod.dll component used by Winamp 5.x. Public d...

CVE-2011-4857: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-3834: Undefined Security Weakness

Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...

Winamp 5.x 整数溢出漏洞

Bugtraq ID: 51015 CVE ID：CVE-2011-3834 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当使用流头字段数值分配内存时inavi.dll插件存在整数溢出，通过特制的AVI文件可触发基于堆的缓冲区溢出。 -当使用RIFF INFO块大小值分配内存时inavi.dll插件存在整数溢出，通过特制的AVI文件可触发基于堆的缓冲区溢出。 -解析Impulse Tracker IT文件中歌曲消息数据时inmod.dll插件存在错误，可被触发基于堆的缓冲区溢出 NullSoft Winamp 5.x...

WinAmp integer overflows

Different integer overflows in AVI parsing...

Secunia Research: Winamp AVI Parsing Two Integer Overflow Vulnerabilities

====================================================================== Secunia Research 12/12/2011 - Winamp AVI Processing Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

Winamp < 5.622 Multiple Vulnerabilities

Binary data 6056.prm...

Winamp < 5.622 Multiple Vulnerabilities

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.622 and is affected by the following overflow vulnerabilities : - A heap-based buffer overflow exists in the plugin 'inmidi.dll' when processing the 'iOffsetMusic'...

Winamp 5.622多个远程安全漏洞

BUGTRAQ ID: 50387 Winamp是流行的通用音乐播放器。 Winamp 5.622在实现上存在多个远程漏洞，远程攻击者可利用这些漏洞执行任意代码或造成拒绝服务。 1在处理Creative Music Format CMF标头中的"iOffsetMusic"值时，inmidi.dll插件中存在错误，可被利用通过特制的MIDI文件造成堆缓冲区溢出。 2）在处理Advanced Module Format AMF标头中的"channels"值时，inmod.dl插件中存在错误，可被利用通过特制的".amf"文件造成堆缓冲区溢出。 3）在处理Nullsoft Streaming...

in_midi multiple vulnerabilities in Winamp 5.61

Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.61 Platforms: Windows Bugs: A inmidi Controller messages heap overflow B inmidi Note On messages heap overflow C inmidi MTrk heap overflow Date: 27 Jun 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

WinAmp multiple security vulnerabilities

Multiple vulnerabilities on FLV and MIDI files parsing...

Multiple vulnerabilities in Winamp 5.61

Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.61 Platforms: Windows Bugs: A vp6 heap corruption B h263 heap corruption C nsvdecvp5 frame heap overflow D nsvdecvp6 frame integer overflow E nsvdecvp3 frame heap overflow F inmod heap corruption Date: 27 Jun 2011 Author: Luig...

Winamp 5.6存在多个安全漏洞

Bugtraq ID: 48457 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者执行任意代码或使应用程序崩溃。 -当解析On2 TrueMotion VP6 codec编码的媒体文件时vp6.w5s存在错误，如果构建的FLV媒体文件中"version"字段超过8，可触发内存破坏。 -解析H263视频内容中"CustomWidth"和"CustomHeight"字段时存在错误，构建特制FLV文件可触发内存破坏。 -解压缩帧时nsvdecvp5.dll存在错误，构建特制的NSV文件可触发基于堆的缓冲区溢出。...