966 matches found
CVE-2004-0820: Undefined Security Weakness
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
CVE-2002-1524
Winamp 3 (version 1.0.0.488) is affected by a buffer overflow in the XML parser function wsabi.dll. An attacker can craft a skin file (.wal) containing a long include file tag to potentially execute arbitrary code on a remote system. The vulnerability is described as a buffer overflow in the XML ...
CVE-2002-0546
CVE-2002-0546: In the Winamp mini-browser (versions 2.78 and 2.79), the HTML/JS execution vulnerability is triggered by crafted ID3v1/ID3v2 tags in MP3 files, allowing remote script execution. The root cause is cross-site scripting within the mini-browser component when processing MP3 metadata. E...
EUVD-2002-1507
Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...
CVE-2002-0546
Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file...
CVE-2002-1524
Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...
CVE-2002-0546: Undefined Security Weakness
Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file...
CVE-2002-1524: Undefined Security Weakness
Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...
CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
WinAmp => 5.04 XML Remote Code exec
hello.. security.nnov.ru team i just coded an exploit to the WinAmp = 5.04 XML Remote Code exec bug if you like.. check The exploit http://blackhat.tv/skinhead.tgz a readme http://blackhat.tv/skinhead/README a working sample http://blackhat.tv/skinhead/ let it go out to the wild! greetings Daniel...
winampExploit.txt
index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/ /html/file.exe malicious file to execute /html/test.htm html to load the .exe /player/ /player/Thumbs.db /xml/ /xml/includes.xml /xml/player-normal.xml /xml/player.xml /skin.xml /html/test.ht...
Winamp 5.04 - .wsz Skin File Remote Code Execution
Winamp 5.04 - .wsz Skin File Remote Code Execution This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/418.rar skinhead.rar - 171 Ko index.html...
VulnCheck KEV: CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ============================================================= Winamp Do not use Winamp ! back: http://inj3ct0r.com/sploits/186.rar index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/...
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
No description provided by source. This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! http://www.milw0rm.com/sploits/skinhead.rar 171 Ko index.html ----------- html head /head frameset rows=",1" framespacing="0" border="0"...
Winamp 5.04 - '.wsz' Skin File Remote Code Execution
This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/418.rar skinhead.rar - 171 Ko index.html ----------- Load.php --------- foo.wsz foo.zip...
Winamp MIDI Plugin Track Size Overflow
Binary data 1952.prm...
Winamp Fasttracker 2 Plug-in in_mod.dll Heap Overflow
Binary data 1222.prm...