CVE-2010-3137

CVE-2010-3137 targets Winamp 5.581 (and potentially other versions) via an untrusted search path: a Trojan wnaspi32.dll placed in the same folder as specific media files (.669, .aac, .aiff, .amf, .au, .avr, .b4s, .caf, .cda) can enable DLL hijacking and arbitrary code execution. The connected Ope...

Nullsoft Winamp 5.581 (wnaspi32.dll) DLL Hijacking Exploit

Summary Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-format, extensible with plug-ins and skins, and is noted for its graphical sound visualization, playlist, and media library features. Description Winam...

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking / Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL...

NullSoft Winamp 5.581 - 'wnaspi32.dll' DLL Hijacking

/ Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is proprietary freeware/shareware, multi-forma...

Winamp 5.572 (Windows 7) - Local Buffer Overflow (ASLR + DEP Bypass)

Winamp 5.572 Windows 7 - Local Buffer Overflow ASLR + DEP Bypass !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windo...

Winamp v5.572 Local BoF Exploit (Win7 ASLR and DEP Bypass)

Exploit for windows platform in category local exploits ========================================================== Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass ========================================================== !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Wi...

Nullsoft Winamp MP4 Files Handling Memory Corruption

Nullsoft Winamp is a popular multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading MPEG-4 files which contain compressed audio...

Nullsoft Winamp Midi File Header Handling Buffer Overflow (CVE-2006-3228)

Winamp is a popular multimedia player, produced by Nullsoft, which is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files, as well as numerous other formats. A vulnerability exists in the MIDI file parsing component of Nullsoft...

Nullsoft WinAmp Ultravox ultravox-max-msg Header Buffer Overflow (CVE-2006-5567)

NullSoft Winamp is a multimedia player that is capable of playing many formats of audio and video files and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. Ultravox or Ultravox Media On Demand Server UltraMODS is...

Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...

Nullsoft Winamp AIFF Parsing Heap Buffer Overflow (CVE-2009-0263)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading AIFF media file which has file extension "aiff". A...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

Integer overflow

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

CVE-2009-1831

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

CVE-2009-1831

The CVE-2009-1831 flaw affects Nullsoft Winamp’s gen_ff.dll in versions before 5.552. It allows a remote attacker to trigger a stack-based buffer overflow while parsing a MAKI file, caused by an incorrect sign extension and an integer overflow. Result: remote code execution or crashes as describe...

CVE-2009-1831

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

Nullsoft Winamp 'gen_ff.dll'缓冲区溢出漏洞

Bugraq ID: 35052 CNCAN ID：CNCAN-2009052503 Nullsoft Winamp是一款流行的媒体播放程序。 Nullsoft Winamp处理.maki文件存在一个不正确的类型指派错误，远程攻击者可以利用漏洞进行缓冲区溢出，可能导致以应用程序权限执行任意指令。 当genff.dll处理.maki文件时，读取两个字节并进行符号扩展，导致基于栈的缓冲区溢出，构建恶意文件，诱使用户处理可触发此漏洞。 NullSoft Winamp 5.3.2 NullSoft Winamp 5.0 91 NullSoft Winamp 5.0 9 NullSoft Wina...

Update Protection against Nullsoft Winamp AIFF Parsing Heap Buffer Overflow

A vulnerability was reported in Nullsoft Winamp. Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files, including CD tracks, MP3 music files or MPEG video files as well as numerous other formats. The vulnerability is due to improper...

Cross site scripting

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...

CVE-2008-3567

Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting XSS attacks via an MP3 file with JavaScript in id3 tags...