CVE-2006-0708

CVE-2006-0708 describes multiple buffer overflows in Nullsoft Winamp 5.13 and earlier that allow remote code execution via crafted playlists (.m3u/.pls) with long URLs or filenames ending in .wma. Connected docs confirm related variants (CVE-2005-3188, CVE-2006-0476) and publicly available exploi...

CVE-2006-0708: Undefined Security Weakness

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

New winamp m3u/pls .WMA & .M3U Extension overflows

This is an update on. http://idefense.com/intelligence/vulnerabilities/display.php?id=378 and also a new overflow with .m3u This overflow is still present in the latest version of winamp 5.13 with a little bit of modifcation. FIRST VULN ========== like so.. Example m3U file format: EXTM3U...

CVE-2005-3188

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via 1 an m3u file containing a long line ending in .wma or 2 a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476...

CVE-2005-3188

CVE-2005-3188 corresponds to a buffer overflow in Nullsoft Winamp 5.094, triggered by crafted playlist references in m3u or pls files (long lines ending in .wma). The issue enables remote code execution due to inadequate input sanitization during playlist processing. Relatedly, CVE-2006-0476 cove...

CVE-2005-3188: Undefined Security Weakness

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via 1 an m3u file containing a long line ending in .wma or 2 a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476...

US-CERT Technical Cyber Security Alert TA06-032A -- Winamp Playlist Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-032A Winamp Playlist Buffer Overflow Original release date: February 1, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems with Winamp 5.12 or earlier Overvi...

iDefense Security Advisory 02.01.06: Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability

Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability iDefense Security Advisory 02.01.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=378 February 1, 2006 I. BACKGROUND Winamp is a popular media player for Windows which supports many audio/video file formats. More...

iDefense Security Advisory 02.01.06: Winamp m3u Parsing Stack Overflow Vulnerability

Winamp m3u Parsing Stack Overflow Vulnerability iDefense Security Advisory 02.01.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=377 February 1, 2006 I. BACKGROUND Winamp is a popular media player for Windows which supports many audio/video file formats. More information ca...

CVE-2006-0476

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist pls file with a long file name File1 field...

Immunity Canvas: VSPLOIT_WINAMP512

Name| vsploitwinamp512 ---|--- CVE| CVE-2006-0476 Exploit Pack| CANVAS Description| Winamp 5.12 .pls overflow Notes| CVE Name: CVE-2006-0476 VENDOR: Nullsoft Repeatability: References: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=377 CVE Url:...

Buffer overflow

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist pls file with a long file name File1 field...

CVE-2006-0476

Winamp 5.13 and earlier variants (notably 5.12) are affected by buffer-overflow flaws triggered by crafted playlist files (M3U/PLS) containing long URLs/filenames, enabling remote code execution. Connected sources document CVE-2006-0476 and related CVEs (e.g., CVE-2006-0708, CVE-2005-3188) descri...

CVE-2006-0476

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist pls file with a long file name File1 field...

Winamp 5.12 - .pls Remote Buffer Overflow (Metasploit)

Winamp 5.12 - .pls Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Expl (meta)

Exploit for unknown platform in category remote exploits ================================================================== Winamp 1, 'Enable gzip content encoding', 'Chunked' = 1, 'Enable chunked transfer encoding', 'Humor' = 0, 'Enable humorous song names', ; my $info = 'Name' = 'Winamp Playlis...

Winamp playlist file buffer overflow

Added: 01/31/2006 CVE: CVE-2006-0476 BID: 16410 OSVDB: 22789 Background Winamp is a media player for Windows. Problem A buffer overflow in Winamp allows code execution when a specially crafted playlist file is opened. Resolution Upgrade to Winamp 5.13 or higher. References Limitations Exploit...

Winamp playlist file buffer overflow

Added: 01/31/2006 CVE: CVE-2006-0476 BID: 16410 OSVDB: 22789 Background Winamp is a media player for Windows. Problem A buffer overflow in Winamp allows code execution when a specially crafted playlist file is opened. Resolution Upgrade to Winamp 5.13 or higher. References...

Winamp fails to properly handle playlists with long "file" parameter

Overview Winamp contains a buffer overflow vulnerability when processing a playlist that has a long file parameter. This may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Winamp Winamp is a media player for Microsoft Windows systems. It can...

Winamp 5.12 - '.pls' Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...