Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================== Winamp include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B" "\x00\x00"; char badc0de =...

Winamp 5.21 - '.Midi' File Header Handling Buffer Overflow (PoC)

/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include include include void usagechar file; char header = "\x4D\x54\x68\x64\x00\x00" "\x00\x06\x00\x00\x00\x01" "\x00\x60\x4D\x54\x72\x6B" "\x00\x00"; char badc0de = "\xFF\xFF\xFF\xFF\xFF\xFF"...

Winamp < 5.22 MIDI File Handling Overflow

Binary data 3658.prm...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

Winamp < 5.2 Multiple Vulnerabilities

The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly crashes if the user tries to open an M3U file with a long filename. In addition, it reportedly contains a buffer overflow flaw that can be exploited using a...

WinAmp player buffer overflow

Buffer overflow on oversized computer name in UNC path of .pls on .m3u file entry. Buffer overflow on oversized WMA playlist file entry. Vulnerability can be exploited for hidden trojan installation...

IRM 018: Winamp 5.13 m3u Playlist Buffer Overflow

IRM Security Advisory No. 018 Winamp 5.13 m3u Playlist Buffer Overflow Vulnerability Type / Importance: Unauthorised Code Execution / High Problem Discovered: February 17th 2006 Vendor Contacted: February 17th 2006 Advisory Published: February 24th 2006 Abstract: Nullsoft Winamp is a popular medi...

NSFOCUS SA2006-01 : Winamp m3u File Processing Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2006-01 Winamp m3u File Processing Buffer Overflow Vulnerability Release Date: 2006-02-23 CVE ID: CVE-2006-0720 http://www.nsfocus.com/english/homepage/research/0601.htm Affected systems & software =========================== Nullsoft Winamp 5.12 Nullsoft Winamp 5.13...

CVE-2006-0720

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file...

Stack overflow

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file...

CVE-2006-0720

Winamp 5.12/5.13 are affected by a stack-based buffer overflow in .m3u handling. The vulnerability stems from an incorrect strncpy call when pausing or stopping playback, leading to a denial of service and potential arbitrary code execution. Public PoCs/exploits exist for Winamp 5.12 (.m3u) and a...

CVE-2006-0720

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file...

Winamp < 5.14 .M3U File Handling Buffer Overflow

Binary data 3445.prm...

CVE-2006-0720: Undefined Security Weakness

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file...

[Full-disclosure] Winamp .m3u fun again ;&#41;

Winamp .m3u Remote Buffer Overflow Vulnerability 0day by Sowhat Discovery: 2005.07.21 Pubulished: 2006.02.16 http://secway.org/advisory/AD20060216.txt Affected: Winamp All versions including 5.13 Overview: WinAMP is a popular media player that supports various media and playlist formats, includin...

CVE-2006-0708

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

Buffer overflow

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2006-0708

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...