Winamp 'AVI' File Multiple Heap-based Buffer Overflow Vulnerabilities

This host is installed with Winamp and is prone to heap-based buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbwinampavimultbofvuln.nasl 5963 2017-04-18 09:02:14Z teissa $ Winamp 'AVI' File Multiple Heap-based Buffer Overflow Vulnerabilities Authors: Madhuri D Copyright: Copyrig...

Winamp 'AVI' File Multiple Heap-based Buffer Overflow Vulnerabilities

Winamp is prone to heap-based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4045

Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the 1 strf chunk in BIRGB or 2 UYVY video data in an AVI file, or 3 decompressed TechSmith Screen Capture Codec TSCC data in an AVI file...

Heap overflow

Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the 1 strf chunk in BIRGB or 2 UYVY video data in an AVI file, or 3 decompressed TechSmith Screen Capture Codec TSCC data in an AVI file...

CVE-2012-4045

CVE-2012-4045 affects Winamp prior to 5.63 build 3235, caused by multiple heap-based buffer overflows in bmp.w5s handling specific data (strf chunk in BI_RGB, UYVY video data in AVI, and decompressed TSCC data in AVI). The vulnerability allows remote code execution, with attack vector over a netw...

CVE-2012-4045

Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the 1 strf chunk in BIRGB or 2 UYVY video data in an AVI file, or 3 decompressed TechSmith Screen Capture Codec TSCC data in an AVI file...

Vulnerabilities in Nullsoft Winamp Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of vulnerabilities affecting Nullsoft Winamp software version 5.623 and earlier. Microsoft discovered and disclosed the vulnerabilities under coordinated vulnerability disclosure to the affected vendor, Nullsof...

CVE-2012-3890

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a .IT file...

CVE-2012-3889

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a .IT file...

Memory corruption

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a .IT file...

Memory corruption

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a .IT file...

CVE-2012-3889

CVE-2012-3889 affects Winamp up to version 5.62/5.63 where the in_mod.dll handling of Impulse Tracker (.it) files can trigger memory corruption. The MSVR12-011 advisory confirms multiple vulnerabilities in Winamp 5.623 and earlier, enabling potential arbitrary code execution when a user opens a c...

CVE-2012-3890

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a .IT file...

CVE-2012-3890

The CVE-2012-3890 issue affects Winamp prior to version 5.63, due to a flaw in the in_mod.dll when parsing Impulse Tracker (.it) files, allowing remote attackers to trigger heap memory corruption and potentially other impacts. Microsoft’s advisory MSVR12-011 notes multiple vulnerabilities in Winamp

CVE-2012-3889

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a .IT file...

Winamp < 5.63 Multiple Vulnerabilities

Binary data 6908.prm...

Winamp < 5.64 Multiple Vulnerabilities

Binary data 6907.prm...

Winamp < 5.63 Multiple Vulnerabilities

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.63 and is, therefore, reportedly affected by the following vulnerabilities : - A memory corruption error exists in 'inmod.dll' related to input validation when...

Winamp 5.13 - .m3u File Exception Handling Remote Denial of Service

Winamp 5.13 - .m3u File Exception Handling Remote Denial of Service source: https://www.securityfocus.com/bid/54190/info Winamp is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users...

Winamp 5.13 Full- Exception Handling Vulnerablity

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...