Winamp <= 5.541 (mp3/aiff) Multiple Denial of Service Exploits

No description provided by source. Winamp = 5.541 multiples Denial of Services MP3/AIFF Winamp MP3 file parsing DoS == !/usr/bin/perl use strict; my $mp3 = "\x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00"...

Winamp 5.541 - .mp3.aiff File Multiple Denial of Service Vulnerabilities

Winamp 5.541 - .mp3.aiff File Multiple Denial of Service Vulnerabilities Winamp !/usr/bin/perl use strict; my $mp3 = "\x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00". "\x50\x69\x73\x74\x65\x20\x35\x54\x50\x45\x31\x00\x00\x00\x05\x00\x00\x00\x41\x6e"...

Winamp 5.541 - '.mp3'/'.aiff' File Multiple Denial of Service Vulnerabilities

Winamp !/usr/bin/perl use strict; my $mp3 = "\x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00". "\x50\x69\x73\x74\x65\x20\x35\x54\x50\x45\x31\x00\x00\x00\x05\x00\x00\x00\x41\x6e". "\x69\x73\x54\x41\x4c\x42\x00\x00\x00\x0d\x00\x00\x00\x62\x6c\x61\x62\x6c\x61\x20...

Winamp gen_msn插件播放列表文件处理堆溢出漏洞

BUGTRAQ ID: 33159 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp所使用的genmsn插件（genmsn.dll）在处理超长的播放列表项时存在堆溢出漏洞，如果用户受骗加载了恶意的.PLS文件就可以触发这个溢出，导致执行任意指令。 Nullsoft Winamp 5.541 厂商补丁： Nullsoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.winamp.com/ http://www.sebug.net/exploit/5574/...

gen_msn Winamp插件'.pls'播放列表文件缓冲区溢出漏洞

BUGTRAQ ID: 33159 CNCAN ID：CNCAN-2009010804 genmsn是一款winamp的插件，可在MSN显示播放的音乐。 genmsn处理播放列表文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含超长字符的'.PLS'文件，诱使用户使用导入，可导致以应用程序权限执行任意指令。 Shane Hird WindowsLive Messenger Now Playing Plugin genmsn 0.31 厂商解决方案 目前没有详细解决方案提供：...

WinAmp GEN_MSN Plugin Heap Buffer Overflow PoC

No description provided by source. !/usr/bin/perl WinAmp GENMSN Plugin Heap Buffer Overflow ------------------------------------ Discovered by SkD [email protected] & [email protected] ------------------------------------ I'm not much for posting PoCs because I like writing exploits for whatever ...

Winamp GEN_MSN Plugin - Heap Buffer Overflow (PoC)

Winamp GENMSN Plugin - Heap Buffer Overflow PoC !/usr/bin/perl WinAmp GENMSN Plugin Heap Buffer Overflow ------------------------------------ Discovered by SkD [email protected] & [email protected] ------------------------------------ I'm not much for posting PoCs because I like writing exploits...

WinAmp GEN_MSN Plugin Heap Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================== WinAmp GENMSN Plugin Heap Buffer Overflow PoC ============================================== !/usr/bin/perl WinAmp GENMSN Plugin Heap Buffer Overflow ------------------------------------ Discovered b...

Winamp GEN_MSN Plugin - Heap Buffer Overflow (PoC)

!/usr/bin/perl WinAmp GENMSN Plugin Heap Buffer Overflow ------------------------------------ Discovered by SkD [email protected] & [email protected] ------------------------------------ I'm not much for posting PoCs because I like writing exploits for whatever I discover and if I don't, its a...

WinAmp GEN_MSN Plugin Heap Buffer Overflow

!/usr/bin/perl WinAmp GENMSN Plugin Heap Buffer Overflow ------------------------------------ Discovered by SkD [email protected] & [email protected] ------------------------------------ I'm not much for posting PoCs because I like writing exploits for whatever I discover and if I don't, its a...

Cross site scripting

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567

CVE-2008-3567 affects Winamp before 5.541: cross-zone scripting via the NowPlaying feature allows XSS through an MP3 file with JavaScript in id3 tags. Vulnerable component is Winamp’s NowPlaying metadata handling; root cause is unsanitized id3 tag content rendered by the embedded browser. Observe...

CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567: Improper Neutralization of Input During Web Page Generation

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

Winamp 'NowPlaying'未明安全漏洞

BUGTRAQ ID: 30539 CNCAN ID：CNCAN-2008080601 Winamp是一款媒体播放程序。 Winamp包含的NowPlaying"功能存在未明错误，目前没有详细漏洞细节提供。 NullSoft Winamp 5.54 升级程序： NullSoft Winamp 5.54 NullSoft winamp5541fullen-us.exe http://download.nullsoft.com/winamp/client/winamp5541fullen-us.exe NullSoft winamp5541liteen-us.exe...

Winamp < 5.541 NowPlaying Unspecified Vulnerability

Binary data 4617.prm...

Winamp < 5.541 NowPlaying Feature Metadata XSS

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.541. Such versions reportedly contain a cross-site scripting vulnerability involving the software's 'NowPlaying' feature because the embedded browser fails to saniti...

CVE-2008-3441

Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Design/Logic Flaw

Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...