Secunia Research: Winamp AVI Parsing Two Integer Overflow Vulnerabilities

====================================================================== Secunia Research 12/12/2011 - Winamp AVI Processing Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

Winamp < 5.622 Multiple Vulnerabilities

Binary data 6056.prm...

Winamp < 5.622 Multiple Vulnerabilities

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.622 and is affected by the following overflow vulnerabilities : - A heap-based buffer overflow exists in the plugin 'inmidi.dll' when processing the 'iOffsetMusic'...

Winamp 5.622多个远程安全漏洞

BUGTRAQ ID: 50387 Winamp是流行的通用音乐播放器。 Winamp 5.622在实现上存在多个远程漏洞，远程攻击者可利用这些漏洞执行任意代码或造成拒绝服务。 1在处理Creative Music Format CMF标头中的"iOffsetMusic"值时，inmidi.dll插件中存在错误，可被利用通过特制的MIDI文件造成堆缓冲区溢出。 2）在处理Advanced Module Format AMF标头中的"channels"值时，inmod.dl插件中存在错误，可被利用通过特制的".amf"文件造成堆缓冲区溢出。 3）在处理Nullsoft Streaming...

WinAmp multiple security vulnerabilities

Multiple vulnerabilities on FLV and MIDI files parsing...

in_midi multiple vulnerabilities in Winamp 5.61

Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.61 Platforms: Windows Bugs: A inmidi Controller messages heap overflow B inmidi Note On messages heap overflow C inmidi MTrk heap overflow Date: 27 Jun 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Multiple vulnerabilities in Winamp 5.61

Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.61 Platforms: Windows Bugs: A vp6 heap corruption B h263 heap corruption C nsvdecvp5 frame heap overflow D nsvdecvp6 frame integer overflow E nsvdecvp3 frame heap overflow F inmod heap corruption Date: 27 Jun 2011 Author: Luig...

Winamp 5.6存在多个安全漏洞

Bugtraq ID: 48457 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者执行任意代码或使应用程序崩溃。 -当解析On2 TrueMotion VP6 codec编码的媒体文件时vp6.w5s存在错误，如果构建的FLV媒体文件中"version"字段超过8，可触发内存破坏。 -解析H263视频内容中"CustomWidth"和"CustomHeight"字段时存在错误，构建特制FLV文件可触发内存破坏。 -解压缩帧时nsvdecvp5.dll存在错误，构建特制的NSV文件可触发基于堆的缓冲区溢出。...

Winamp 5.61 'in_midi' component heap overflow (crash only)

No description provided by source. Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file with special crafte...

Winamp 5.61 'in_midi' component heap overflow (crash only)

Exploit for windows platform in category dos / poc Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file wit...

Winamp 5.61 - in_midi Component heap Overflow (crash only)

Winamp 5.61 - inmidi Component heap Overflow crash only Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi fil...

Winamp 5.61 Heap Overflow

Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file with special crafted System Exclusive message type...

Winamp 5.61 - &#039;in_midi&#039; Component heap Overflow (crash only)

Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file with special crafted System Exclusive message type...

Winamp <=5.6.1 (.au) Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Winamp special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 Fr Creating The Bad File .AU And Opening ... The Winamp 5.6.1 is Run With Process igfxsrvc.exe and...

Winamp 5.6.1 (.pls) Remote Command Execution

Exploit for windows platform in category local exploits !/usr/bin/perl Title : Winamp 5.6.1 .pls Remote Command Execution Author : KedAns-Dz E-mail : email protected || email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : windows Impact ...

Winamp 5.6.1 .pls Remote Command Execution

!/usr/bin/perl Title : Winamp 5.6.1 .pls Remote Command Execution Author : KedAns-Dz E-mail : [email protected] || [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : windows Impact : Remote Command Execution / Download and Exec /...

Winamp 5.6.1 Denial Of Service

!/usr/bin/perl --------- Winamp special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 Fr Creating The Bad File .AU And Opening ... The Winamp 5.6.1 is Run With Process igfxsrvc.exe and Overflow/Blocked !! my $AU =...

Winamp 5.6.1 Install Language SEH Exploit

Winamp 'Winamp %q This module exploits a stack buffer overflow in versions v5.6.1 In Winamp 5.6.1 Install New Language with .wlz file, and In File .wlz can Inclusion SEH for Installing an attacker may be able to execute arbitrary code. , 'License' = MSFLICENSE, 'Author' = 'KedAns-Dz | ', 'Version...

Winamp <= 5.6.1 Install Language SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl --------- Winamp special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- In Winamp 5.6.1 Install New Language with .wlz file and In File .wlz can Inclusion SEH for Installing ... my $header =...

Winamp 5.6.1 (.m3u8) Stack Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/perl Title : Winamp 5.6.1 .m3u8 Stack Buffer Overflow Author : KedAns-Dz E-mail : email protected || email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : windows Impact :...