Nullsoft Winamp Player Playlists Name Handling Buffer Overflow (CVE-2006-0476; CVE-2006-0708)

NullSoft Winamp is a multimedia player that is capable of playing many formats of audio and video files. Winamp is capable of retrieving and displaying meta data embedded in media files. There exists a buffer overflow vulnerability in Nullsoft Winamp Player. The vulnerability is caused by...

Buffer overflow

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2006-0708

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2006-0476

Winamp 5.13 and earlier variants (notably 5.12) are affected by buffer-overflow flaws triggered by crafted playlist files (M3U/PLS) containing long URLs/filenames, enabling remote code execution. Connected sources document CVE-2006-0476 and related CVEs (e.g., CVE-2006-0708, CVE-2005-3188) descri...

Winamp playlist file buffer overflow

Added: 01/31/2006 CVE: CVE-2006-0476 BID: 16410 OSVDB: 22789 Background Winamp is a media player for Windows. Problem A buffer overflow in Winamp allows code execution when a specially crafted playlist file is opened. Resolution Upgrade to Winamp 5.13 or higher. References...