NullSoft WinAmp multiple security vulnerabilities

Multiple memory corruptions in different modules...

[Full-disclosure] AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption

AOL Nullsoft Winamp S3M Module "INMOD.DLL" Remote Heap Memory Corruption by Piotr Bania [email protected] http://www.piotrbania.com Severity: Important - Potencial remote code execution. Software affected: Tested on AOL Nullsoft Winamp v5.33 x86 Feb 13 2007 on Windows XP SP1/SP2. Orginal url:...

[Full-disclosure] AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero)

AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption Off By Zero by Piotr Bania [email protected] http://www.piotrbania.com Severity: Critical - Possible remote code execution. Software affected: Tested on AOL Nullsoft Winamp v5.33 x86 Feb 13 2007 on Windows XP SP1/SP2. There exist a...

[Full-disclosure] AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption

AOL Nullsoft Winamp IT Module "INMOD.DLL" Remote Heap Memory Corruption by Piotr Bania [email protected] http://www.piotrbania.com Severity: Important - Potencial remote code execution. Software affected: Tested on AOL Nullsoft Winamp v5.33 x86 Feb 13 2007 on Windows XP SP1/SP2. Orginal url:...

winamp512-overflow.txt

!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)

No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp 5.12 - .pls Remote Buffer Overflow (Perl) (2)

Winamp 5.12 - .pls Remote Buffer Overflow Perl 2 !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)

No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)

!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)

Exploit for unknown platform in category remote exploits ================================================================== Winamp = 5.12 Crafted PLS Remote Buffer Overflow Exploit perl ================================================================== !/usr/bin/perl -w...

CVE-2006-6547

Buffer overflow in the readAA function in readaa.cpp in Winamp iPod Plugin mlipod 2.00 p19 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long tag in an audible.com audiobook aa file...

CVE-2006-6547

The CVE-2006-6547 entry describes a buffer overflow in the Winamp iPod Plugin (ml_ipod) readAA function (read_aa.cpp) affecting version 2.00 p19 and earlier. An attacker can exploit a long tag in an audible.com audiobook (aa) file to trigger a denial of service (application crash) or potentially ...

CVE-2006-6547

Buffer overflow in the readAA function in readaa.cpp in Winamp iPod Plugin mlipod 2.00 p19 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long tag in an audible.com audiobook aa file...

CVE-2006-6539

Multiple buffer overflows in Winamp Web Interface Wawi 7.5.13 and earlier 1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an a long username or a b crafted packet to the FindBasicAuth function in security.cpp, related to the /browse...

CVE-2006-6539

CVE-2006-6539 affects Winamp Web Interface (Wawi) prior to or including 7.5.13. The vulnerability consists of multiple buffer overflows in the security.cpp FindBasicAuth function (related to the /browse URI) triggered by a long username or crafted packet, leading to remote denial of service and p...

CVE-2006-6539

Multiple buffer overflows in Winamp Web Interface Wawi 7.5.13 and earlier 1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an a long username or a b crafted packet to the FindBasicAuth function in security.cpp, related to the /browse...

CVE-2006-6512

Directory traversal vulnerability in the Browse function /browse URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes "%2F" in the path parameter...

CVE-2006-6513

The CControl::Download function /dl URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." dot in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function...

CVE-2006-6514

Winamp Web Interface Wawi 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name...

CVE-2006-6514

Winamp Web Interface Wawi 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name...