EUVD-2009-3966

Malware in sbrugna...

EUVD-2009-3967

Malware in sbrugna...

SUSE CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

Heap overflow

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-4857

Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...

CVE-2011-4857

CVE-2011-4857 describes a heap-based buffer overflow in Winamp’s in_mod.dll plugin (pre-5.623) triggered by crafted Impulse Tracker (IT) file data, enabling remote code execution. The issue is tied to parsing/handling in IT data and relates to the in_mod.dll component used by Winamp 5.x. Public d...

Winamp 5.x 整数溢出漏洞

Bugtraq ID: 51015 CVE ID：CVE-2011-3834 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当使用流头字段数值分配内存时inavi.dll插件存在整数溢出，通过特制的AVI文件可触发基于堆的缓冲区溢出。 -当使用RIFF INFO块大小值分配内存时inavi.dll插件存在整数溢出，通过特制的AVI文件可触发基于堆的缓冲区溢出。 -解析Impulse Tracker IT文件中歌曲消息数据时inmod.dll插件存在错误，可被触发基于堆的缓冲区溢出 NullSoft Winamp 5.x...

Winamp 5.6存在多个安全漏洞

Bugtraq ID: 48457 Winamp是一款流行的媒体播放器。 Winamp存在多个安全漏洞，允许攻击者执行任意代码或使应用程序崩溃。 -当解析On2 TrueMotion VP6 codec编码的媒体文件时vp6.w5s存在错误，如果构建的FLV媒体文件中"version"字段超过8，可触发内存破坏。 -解析H263视频内容中"CustomWidth"和"CustomHeight"字段时存在错误，构建特制FLV文件可触发内存破坏。 -解压缩帧时nsvdecvp5.dll存在错误，构建特制的NSV文件可触发基于堆的缓冲区溢出。...

Winamp Module Decoder Plug-in Multiple Buffer Overflow Vulnerabilities

Winamp is prone to multiple Buffer Overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3996

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

CVE-2009-3995

Summary (CVE-2009-3995) : The issue arises from multiple heap-based buffer overflows in MikMod (libmikmod, loaders/load_it.c, possibly version 3.1.12) used by Impulse Tracker-compatible formats. Exploitation via specially crafted Impulse Tracker samples or instrument definitions could allow a rem...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

CVE-2009-3997

The CVE-2009-3997 issue affects Winamp’s Module Decoder Plug‑in (IN_MOD.DLL). The vulnerability is a heap-based buffer overflow triggered by an Oktalyzer file, and it could allow remote code execution in Winamp builds prior to 5.57. Documented details consistently describe an integer/heap overflo...

CVE-2009-3997

Integer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57 might allow remote attackers to execute arbitrary code via an Oktalyzer file that triggers a heap-based buffer overflow...

CVE-2009-3995

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

Winamp <= 5.55 (MAKI script) Universal Seh Overwrite PoC

Exploit for unknown platform in category dos / poc ======================================================== Winamp = 5.55 MAKI script Universal Seh Overwrite PoC ======================================================== x Bug: Winamp = 5.55 MAKI script Universal Seh Overwrite Exploit x Exploited B...

Memory corruption

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

CVE-2004-1896

Heap-based buffer overflow in inmod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 .xm mod media file...

Winamp Fasttracker 2 Plug-in in_mod.dll Heap Overflow

Binary data 1222.prm...