889 matches found
CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
WinAmp => 5.04 XML Remote Code exec
hello.. security.nnov.ru team i just coded an exploit to the WinAmp = 5.04 XML Remote Code exec bug if you like.. check The exploit http://blackhat.tv/skinhead.tgz a readme http://blackhat.tv/skinhead/README a working sample http://blackhat.tv/skinhead/ let it go out to the wild! greetings Daniel...
winampExploit.txt
index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/ /html/file.exe malicious file to execute /html/test.htm html to load the .exe /player/ /player/Thumbs.db /xml/ /xml/includes.xml /xml/player-normal.xml /xml/player.xml /skin.xml /html/test.ht...
Winamp 5.04 - .wsz Skin File Remote Code Execution
Winamp 5.04 - .wsz Skin File Remote Code Execution This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/418.rar skinhead.rar - 171 Ko index.html...
VulnCheck KEV: CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
No description provided by source. This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! http://www.milw0rm.com/sploits/skinhead.rar 171 Ko index.html ----------- html head /head frameset rows=",1" framespacing="0" border="0"...
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ============================================================= Winamp Do not use Winamp ! back: http://inj3ct0r.com/sploits/186.rar index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/...
Winamp 5.04 - '.wsz' Skin File Remote Code Execution
This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/418.rar skinhead.rar - 171 Ko index.html ----------- Load.php --------- foo.wsz foo.zip...
Winamp MIDI Plugin Track Size Overflow
Binary data 1952.prm...
Winamp Fasttracker 2 Plug-in in_mod.dll Heap Overflow
Binary data 1222.prm...
Winamp b4s File Handling Multiple Malformed Fields Overflow
Binary data 1223.prm...
Winamp Malformed File Name Handling DoS
Binary data 1225.prm...
Winamp < 5.05 .WSZ File Handling RCE
Binary data 2151.prm...
Winamp < 5.552 Buffer Overflow
Binary data 5031.prm...
NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution
NullSoft Winamp 2.4 5.0.4 - .wsz Remote Code Execution source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is current...
NullSoft Winamp 2.4 < 5.0.4 - '.wsz' Remote Code Execution
source: https://www.securityfocus.com/bid/11053/info A vulnerability in Winamp has been discovered that may permit remote attackers to execute arbitrary code on client computers through a malicious .WSZ Winamp skin file. This issue is currently being exploited in the wild. This vulnerability may ...
[VulnWatch] Nullsoft Winamp 'in_mod.dll' Heap Overflow
NGSSoftware Insight Security Research Advisory Name: Nullsoft Winamp 'inmod.dll' Heap Overflow Systems Affected: Nullsoft Winamp versions 2.91 to 5.02 possibly older versions, although this is not confirmed Severity: High Risk Vendor URL: http://www.winamp.com/ Author: Peter Winter-Smith...
Winamp buffer overflow
inmod.dll .xm files parsing buffer overflow...
CVE-2003-1274
Winamp 3.0 allows remote attackers to cause a denial of service crash via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux...
CVE-2003-1272
Multiple buffer overflows in Winamp 3.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .b4s file containing 1 a long playlist name or 2 a long path in a file: argument to the Playstring parameter...