83 matches found
CVE-2004-1396
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service application crash or CPU consumption via 1 an mp4 or m4a playlist file that contains invalid tag data or 2 an invalid .nsv or .nsa file...
Winamp < 5.0.7 Multiple File Handling DoS
The remote host is using Winamp, a popular media player that handles many file formats mp3, wavs and more... The remote version of this software is vulnerable to denial of service attacks when it processes malformed .mp4 / .m4a or .nsv / .nsa files. An attacker may exploit this flaw by sending...
Nullsoft Winamp Large MP4 / M4A File Remote DoS
Binary data 2455.prm...
CVE-2004-1119
Stack-based buffer overflow in INCDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file...
Winamp 5.06 - IN_CDDA.dll Remote Buffer Overflow
Winamp 5.06 - INCDDA.dll Remote Buffer Overflow / Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C...
Winamp <= 5.06 IN_CDDA.dll Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================= Winamp //File ops. //m3u File format //http://hanna.pyxidis.org/tech/m3u.html // Host info: // Name=ntdll system // File version=5.1.2600.1217 xpsp2.030429-213 //...
Winamp 5.06 - 'IN_CDDA.dll' Remote Buffer Overflow
/ Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C0 TEST AL,AL 10009BC1 74 0F JE SHORT...
Nullsoft Winamp < 5.0.7 IN_CDDA.dll Remote Buffer Overflow
Binary data 2426.prm...
Winamp < 5.07 IN_CDDA.dll m3u Playlist Processing Overflow
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host has a buffer overflow that may allow an attacker to execute arbitrary code on the remote host subject to the privileges of the user running Winamp. To exploit this, an...
NullSoft Winamp 2.x/3.x/5.0.x - ActiveX Control Remote Buffer Overflow
source: https://www.securityfocus.com/bid/11107/info Nullsoft Winamp ActiveX Control is alleged to be prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker can exploit this issue to execute...
CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
WinAmp => 5.04 XML Remote Code exec
hello.. security.nnov.ru team i just coded an exploit to the WinAmp = 5.04 XML Remote Code exec bug if you like.. check The exploit http://blackhat.tv/skinhead.tgz a readme http://blackhat.tv/skinhead/README a working sample http://blackhat.tv/skinhead/ let it go out to the wild! greetings Daniel...
VulnCheck KEV: CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ============================================================= Winamp Do not use Winamp ! back: http://inj3ct0r.com/sploits/186.rar index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/...
Winamp 5.04 - '.wsz' Skin File Remote Code Execution
This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/418.rar skinhead.rar - 171 Ko index.html ----------- Load.php --------- foo.wsz foo.zip...
Winamp Malformed File Name Handling DoS
Binary data 1225.prm...
Winamp < 5.05 .WSZ File Handling RCE
Binary data 2151.prm...
NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution
NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is current...
NullSoft Winamp 2.4 < 5.0.4 - '.wsz' Remote Code Execution
source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is currently being exploited in the wild. This vulnerability may ...