966 matches found
CVE-2003-1273
Winamp 3.0 is affected: processing a .b4s playlist file with a name containing non-English characters (e.g., Cyrillic) can crash the application, causing a denial of service. The provided documents do not specify a patch or exact remediation; no exploitation details are given. In short, vulnerabl...
CVE-2002-2195: Undefined Security Weakness
Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response...
CVE-2003-1273: Undefined Security Weakness
Winamp 3.0 allows remote attackers to cause a denial of service crash via a .b4s file with a playlist name that contains some non-English characters, e.g. Cyrillic characters...
CVE-2003-1274: Undefined Security Weakness
Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...
CVE-2003-1272: Undefined Security Weakness
Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .b4s file containing 1 a long playlist name or 2 a long path in a file: argument to the Playstring parameter...
CVE-2004-2384
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...
CVE-2004-2384
Affected software: NullSoft Winamp versions around 5.02 and older (Winamp
CVE-2004-2384: Undefined Security Weakness
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...
CVE-2005-2310
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...
CVE-2005-2310
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...
CVE-2005-2310
CVE-2005-2310 : Winamp 5.03a, 5.09, 5.091 and other builds before 5.094 are affected by a buffer overflow in ID3v2 tag handling. An MP3 file with a crafted long ID3v2 tag (e.g., ARTIST or TITLE) can be parsed by Winamp, enabling a remote attacker to execute arbitrary code with the caller’s privil...
CVE-2005-2310: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as 1 ARTIST or 2 TITLE...
Nullsoft Winamp < 5.093 Malformed ID3v2 Tag Overflow
Binary data 3069.prm...
Winamp < 5.093 Malformed ID3v2 Tag Handling Buffer Overflow
The remote host is using Winamp, a popular media player for Windows. The installed version of Winamp suffers from a buffer overflow vulnerability when processing overly-long ID3v2 tags in an MP3 file. An attacker may be able to exploit this flaw to execute arbitrary code on the remote host...
WinAmp MP3 files ID3v2 tags buffer overflow
Buffer overflow on oversized ID3v2 tag fields...
NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow
NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow source: https://www.securityfocus.com/bid/14276/info Winamp is susceptible to a buffer overflow vulnerability in its ID3v2 functionality. This issue is due to a failure of the application to properly bounds check input data prior to copyin...
[Full-disclosure] LSS Security Advisory: Winamp remote buffer overflow vulnerability
LSS Security Advisory LSS-2005-07-14 http://security.lss.hr Title: Winamp remote buffer overflow vulnerability Advisory ID: LSS-2005-07-14 Date: 2005-07-14 Advisory URL: http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14 Impact: Remote and local code execution Risk Level: High...
NullSoft Winamp 5.0 - Malformed ID3v2 Tag Buffer Overflow
source: https://www.securityfocus.com/bid/14276/info Winamp is susceptible to a buffer overflow vulnerability in its ID3v2 functionality. This issue is due to a failure of the application to properly bounds check input data prior to copying it into a fixed size memory buffer. This issue will...
CVE-2004-1896
This CVE affects Nullsoft Winamp versions 2.91 through 5.02, with a heap-based overflow in the in_mod.dll parser for Fasttracker 2 (.xm) mods. The vulnerability allows remote code execution via a malformed XM file, caused by a bound-check/heap-overflow condition in the XM/.MOD parsing path. The r...