966 matches found
WINAMP also allows execution of arbitrary code (probably a lot more programs aswell)
It would seem that I opened up a can of worms when i created my icq + msie advisory the other day Wich presented a new way to execute arbitrary code on a users machine winamp is equally vulnerable Winamps starts skin files with the extention wsz and the mime type interface/x-winamp-skin automatic...
Outpost24 Advisory: Oddsock PlaylistGenerator Multiple BufferOverlow vulnerability
Outpost24 Advisory www.outpost24.com Advisory Name: Oddsock PlaylistGenerator Multiple BufferOverlow vulnerability Release date: 15/07-02 Software : Song Requester Version : 2.1 Platform: Windows NT/XP/95/98/2000 Severity: DoS Vulnerability, that terminates Winamp, and restart Author: Lucas...
Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service
Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service source: https://www.securityfocus.com/bid/5248/info A vulnerability has been reported for Oddsock Song Requester 2.1. The vulnerability occurs when an attacker makes a request to 'request.cgi' using a long value for the 'listpos'...
Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service
source: https://www.securityfocus.com/bid/5248/info A vulnerability has been reported for Oddsock Song Requester 2.1. The vulnerability occurs when an attacker makes a request to 'request.cgi' using a long value for the 'listpos' parameter. It is possible to cause Song Requester and WinAmp to...
WinAmp autoupdate feature buffer overflow
Buffer overflow during www.winamp.com response parsing...
remote winamp 2.x exploit (all current versions)
2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory Nъmero Dos winamp has an option, enabled by default, which checks on startup for the latest version from www.winamp.com and will then notify the user of a possible upgrade via messagebox.. unfortunately, if it were to receive a huge response, the...
CVE-2002-0547
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag...
CVE-2002-0546
Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...
CVE-2002-0547
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag...
CVE-2002-0547
CVE-2002-0547: A buffer overflow in the Winamp mini-browser (Winamp 2.79 and earlier) can be triggered by a long string in the ID3v2 tag title field, allowing remote attackers to cause a crash (DoS) and potentially execute arbitrary code. The available documents confirm the affected software and ...
CVE-2002-0547: Undefined Security Weakness
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag...
CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...
CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...
CVE-2002-0284
The CVE-2002-0284 entry affects Winamp versions 2.77 and 2.78. When opening a WMA file that requires a license, Winamp apparently sends the full path of the Temporary Internet Files directory to the web page processing the license, potentially allowing a malicious web server to obtain that pathna...
CVE-2002-0284: Undefined Security Weakness
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...
Mp3 file can execute code in Winamp [Sandblad advisory #5]
Sandblad advisory 5 - ---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Mp3 file can execute code in Winamp. Date: 2002-04-26 Software: Nullsoft Winamp 2.79 Rating: High because mp3 files are widely trusted as safe. Impact: Specially crafted mp3 file can execute arbitrary...
Buffer overflow in Winamp
Buffer overflow on MP3 ID3v2 tag processing...
winamp and wma Song Licenses
When opening a wma file with winamp 2.77, 2.78 tested that requires a license to be installed, winamp opens the webpage where it obtains this license through some vb script code calling an active x object, witch it passes the url to itself in order for this page to provide a click-here-to-play ty...