Winamp-5.5.8.2985-(in_mod-plugin)

Pwn And Beans by Mighty-D and 7eK presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow A Script Kiddie Friendly Production...

Winamp-5.5.8-(in_mod-plugin)

Pwn And Beans by Mighty-D presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ POC by fdisk header =...

Winamp-5.1x-(.m3u)

Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file. import struct header ...

WinAmp-5.63-(winamp.ini)

I tried an alpha3 encoded egghunter but could not fit it in a single buffer and unfortunately it did not work, it wrote an invalid address on the stack then tried to access it If you can make it work or find a solution for ASLR/DEP please contact me So I wrote from scratch a venetian shellcode th...

Winamp 5.666 build 3516 - Corrupted .flv Crash (PoC)

Exploit Title : Winamp 5.666 build 3516 'f263.w5s' Corrupted flv Crash POC Product : Winamp 5.666 build 3516 Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://winampplugins.co.uk/Winamp/ Vulnerable version : Winamp 5.666 build...

Winamp 5.666 build 3516 - Corrupted .flv Crash (PoC)

Winamp 5.666 build 3516 - Corrupted .flv Crash PoC Exploit Title : Winamp 5.666 build 3516 'f263.w5s' Corrupted flv Crash POC Product : Winamp 5.666 build 3516 Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link :...

Winamp Libraries Multiple Buffer Overflow Vulnerability (Sep 2014)

Winamp is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nullsoft:winamp"; ifdescripti...

Winamp '.flv' File Processing Memory Corruption Vulnerability

Winamp is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nullsoft:winamp";...

Winamp 5.572 - Local BoF Exploit (Win7 ASLR and DEP Bypass)

No description provided by source. !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars...

Winamp <= 5.541 (mp3/aiff) Multiple Denial of Service Exploits

No description provided by source. Winamp = 5.541 multiples Denial of Services MP3/AIFF Winamp MP3 file parsing DoS == !/usr/bin/perl use strict; my $mp3 = \x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00...

Winamp <= 5.55 (MAKI script) Universal Integer Overflow Exploit

No description provided by source. Winamp = 5.55 MAKI script Universal Integer Overflow Exploit By: Encrypt3d.M!nd Based on: http://milw0rm.com/exploits/8767 place mcvcore.maki on \Winamp\Skins\Bento\scripts and run winmap NOTE:i've tested this on version 5.51,if it isn't workin' with your versio...

WinAmp 5.63 (winamp.ini) - Local Exploit

No description provided by source. Exploit Title: winampevilskin.py Date: 25 August 2013 Exploit Author: Ayman Sagy [email protected] Vendor Homepage: http://www.winamp.com/ Version: 5.63 Tested on: Windows XP Professional SP3 Version 2002 CVE : 2013-4694 Ayman Sagy [email protected] August...

Winamp 5.571 - (.avi) Denial of Service

No description provided by source. Tested on Windows 7 and Winamp v5.571x86 This bug is informed to Nullsoft and was fixed long back. The status can be found at http://forums.winamp.com/showthread.php?s=&threadid=316000 This code works on Python 3.0. To make it work on 3.0 remove braces in print...

NullSoft Winamp 2.10 Playlist Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/925/info Winamp, a program for playing mp3 and other audio files, uses playlist files .pls to store lists of files for playback. The code that reads these files has an unchecked buffer which can be overflowed to cause...

Winamp 5.05-5.13 .ini local stack buffer overflow PoC

No description provided by source. /Winamp 5.05-5.13 .ini local stack buffer overflow poc The problem is in the skin field when a long string is writen it causes the buffer overflow. All u have to do is replace this file with the initial one. -snipp-- Winamp vispluginname=visavs.dll vispluginnum=...

Winamp <= 5.57 - Stack Overflow

No description provided by source. Exploit Title: Winamp = 5.57 Stack Overflow Date: 22 Dec 2009 Author: scriptjunkie, scriptjunkie.1 nospam googlemail nospam com Software Link: http://www.winamp.com/media-player Version: 5.57, 5.56 Tested on: Windows XP, Windows 7 CVE: none at time of writing...

Winamp Playlist UNC Path Computer Name Overflow

No description provided by source. $Id: winampplaylistunc.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC

/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include stdio.h include stdlib.h include string.h void usagechar file; char header = \x4D\x54\x68\x64\x00\x00 \x00\x06\x00\x00\x00\x01 \x00\x60\x4D\x54\x72\x6B \x00\x00; char badc0de =...

Nullsoft Winamp 2.x AIP Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2680/info Winamp is a popular media player supporting MP3 and other filetypes. Versions of Winamp are vulnerable to a buffer overflow condition triggered during processing of Audiosoft parameter files .AIP. A user may...

Winamp <= 5.34 .MP4 File Code Execution Exploit

No description provided by source. /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicate...