CVE-2002-2392

Affected product: Winamp 2.65 through 3.0. Vulnerable component: skin files (wsz and wal) stored in a predictable location. Root cause: a URL reference to these skin files can cause embedded code to be executed. Impact: remote attackers could execute arbitrary code. Exploitation details: CVE desc...

CVE-2002-2392: Undefined Security Weakness

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to 1 wsz and 2 wal files that contain embedded code...

iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities

Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities iDefense Security Advisory 10.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 11, 2007 I. BACKGROUND Free Lossless Audio Codec FLAC is a popular file format for audio data compression. AOL Corp.'s Winamp media...

libFlac / WinAMP multiple integer overflows

Multiple integer overflows on FLAC sound format parsing...

Integer overflow

Multiple integer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer...

CVE-2007-4619

Multiple integer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer...

CVE-2007-4619

CVE-2007-4619 describes multiple heap/stack-based overflows in FLAC libFLAC before 1.2.1 that could allow remote code execution via malformed FLAC files. Public advisories confirm upgrades to FLAC 1.2.1 fix the issue (e.g., Debian DSA-1469-1, CentOS/RHEL advisories, Fedora updates). Affected prod...

Winamp < 5.5 FLAC Plug-in Multiple Buffer Overflows

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host contains a plug-in to handle playing FLAC files that contains several integer buffer overflow vulnerabilities. If an attacker can trick a user on the affected host into...

Winamp < 5.5 libFLAC Integer Overflow

Binary data 4243.prm...

CVE-2007-4619: Undefined Security Weakness

Multiple integer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer...

WinAMP buffer overflow

Buffer overflow on MP4 files parsing...

Winamp < 5.35 MP4 File Handling Buffer Overflow

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains a flaw involving its handling of 'MP4' files. If an attacker can trick a user on the affected host into opening a specially crafted MP4 file, this...

Code injection

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...

CVE-2007-4403

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...

CVE-2007-4403

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...

CVE-2007-4403

The CVE-2007-4403 affects the mIRC Control Plug-in for Winamp. The vulnerability occurs when the name of a song in an MP3 file includes the pipe character (|) shell metacharacter, which can be passed to the shell to trigger user‑assisted remote code execution. The provided documents describe the ...

CVE-2007-4403: Undefined Security Weakness

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...

Stack overflow

Winamp 5.35 allows remote attackers to cause a denial of service program stack overflow and application crash via an M3U file that recursively includes itself...

CVE-2007-4392

Winamp 5.35 allows remote attackers to cause a denial of service program stack overflow and application crash via an M3U file that recursively includes itself...

CVE-2007-4392

CVE-2007-4392 affects Winamp 5.35. A remote-triggered denial of service occurs via an M3U file that recursively includes itself, causing a program stack overflow and application crash. The provided documents confirm the impact but do not include exploit details or concrete remediation steps. No a...