Winamp < 5.05 .WSZ File Handling RCE

Binary data 2151.prm...

Winamp < 5.552 Buffer Overflow

Binary data 5031.prm...

NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution

NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is current...

NullSoft Winamp 2.4 < 5.0.4 - '.wsz' Remote Code Execution

source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is currently being exploited in the wild. This vulnerability may ...

[VulnWatch] Nullsoft Winamp &#39;in_mod.dll&#39; Heap Overflow

NGSSoftware Insight Security Research Advisory Name: Nullsoft Winamp 'inmod.dll' Heap Overflow Systems Affected: Nullsoft Winamp versions 2.91 to 5.02 possibly older versions, although this is not confirmed Severity: High Risk Vendor URL: http://www.winamp.com/ Author: Peter Winter-Smith...

Winamp buffer overflow

inmod.dll .xm files parsing buffer overflow...

CVE-2003-1274

Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...

CVE-2003-1272

Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .b4s file containing 1 a long playlist name or 2 a long path in a file: argument to the Playstring parameter...

CVE-2003-1273

Winamp 3.0 allows remote attackers to cause a denial of service crash via a .b4s file with a playlist name that contains some non-English characters, e.g. Cyrillic characters...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The CVE-2003-0765 entry affects the IN_MIDI.DLL plugin (version 3.01 and earlier) used by Winamp 2.91. According to the description, a remote attacker could execute arbitrary code by feeding a MIDI file containing a large Track data size value. The connected documents confirm Winamp/IN_MIDI.DLL a...

CVE-2003-0765: Undefined Security Weakness

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

Winamp 2.91 lets code execution through MIDI files

Luigi Auriemma Application: Winamp http://www.winamp.com and http://classic.winamp.com Versions: Winamp 2.91 using INMIDI.DLL 3.01 Winamp 3 crashes but I have not found methods to execute code Platforms: Windows Bugs: Code execution through malformed MIDI files Risk: medium/high exploitation has...

WinAmp buffer overflow

Buffer overflow on MIDI files parsing...

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin IN_MIDI.dll Track Data Size Buffer Overflow (PoC)

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin INMIDI.dll Track Data Size Buffer Overflow PoC source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a...

NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a malicious MIDI file header. Although...

Winamp < 3.0b Multiple File Handling DoS

The remote host is using Winamp3, a popular media player which handles many files format mp3, wavs and more... This version suffers from multiple buffer overflow and denial of service issues that can be triggered by specially crafted b4s files. To perform an attack, the attack would have to send ...

CVE-2002-1524

Buffer overflow in XML parser in wsabi.dll of Winamp 3 1.0.0.488 allows remote attackers to execute arbitrary code via a skin file .wal with a long include file tag...

WinAmp v.3.0: buffer overflow

Damage Hacking Group security advisory www.dhgroup.org Product: WinAmp v.3.0 final not beta : bld 488 Authors: NullSoft, Inc. www.winamp.com Vulnerable versions: up to v.3.0 Not vulnerable: all that doesn't support b4s-lists Vulnerability: buffer overflow & code execution...