83 matches found
CVE-2003-1274
Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...
CVE-2003-1273
Winamp 3.0 allows remote attackers to cause a denial of service crash via a .b4s file with a playlist name that contains some non-English characters, e.g. Cyrillic characters...
CVE-2003-0765
The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...
CVE-2003-0765
The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...
WinAmp buffer overflow
Buffer overflow on MIDI files parsing...
CVE-2002-1176
Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file...
WINAMP also allows execution of arbitrary code (probably a lot more programs aswell)
It would seem that I opened up a can of worms when i created my icq + msie advisory the other day Wich presented a new way to execute arbitrary code on a users machine winamp is equally vulnerable Winamps starts skin files with the extention wsz and the mime type interface/x-winamp-skin automatic...
Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service
Oddsock Song Requester 2.1 WinAmp Plugin - Denial of Service source: https://www.securityfocus.com/bid/5248/info A vulnerability has been reported for Oddsock Song Requester 2.1. The vulnerability occurs when an attacker makes a request to 'request.cgi' using a long value for the 'listpos'...
CVE-2002-0547
Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...
CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...
CVE-2002-0284
Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname...
Buffer overflow in Winamp
Buffer overflow on MP3 ID3v2 tag processing...
CVE-2001-0490
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file...
Winamp 2.73 buffer overflow
I recently found a buffer overflow in Winamp 2.73, it's in the way it parses .AIP files... These files are set to download without a download confirmation, like m3u & pls, so they pose a security threat... actually such exploits make winamp a backdoor A demonstration of how the EIP can be snatche...
NullSoft Winamp 2.x - AIP Buffer Overflow
// source: https://www.securityfocus.com/bid/2680/info Winamp is a popular media player supporting MP3 and other filetypes. Versions of Winamp are vulnerable to a buffer overflow condition triggered during processing of Audiosoft parameter files .AIP. A user may insert a large sequence of...
NullSoft Winamp 2.x - AIP Buffer Overflow
NullSoft Winamp 2.x - AIP Buffer Overflow // source: https://www.securityfocus.com/bid/2680/info Winamp is a popular media player supporting MP3 and other filetypes. Versions of Winamp are vulnerable to a buffer overflow condition triggered during processing of Audiosoft parameter files .AIP. A...
winamp.m3u.txt
This is a multi-part message in MIME format. ------=NextPart000649274c$21af Content-Type: text/plain; format=flowed LEGAL NOTICE: By reading this you do agree that life does not make sense and it doesn't need to. You also agree to wear a condom. You do agree to think about nature. .. umm you also...
Winamp M3U playlist parser buffer overflow security vulnerability
LEGAL NOTICE: By reading this you do agree that life does not make sense and it doesn't need to. You also agree to wear a condom. You do agree to think about nature. .. umm you also agree to GPL all software you've ever written. Click here if you're under 18 There is a buffer overflow security...