Nullsoft Winamp Midi File Header Handling Buffer Overflow (CVE-2006-3228)

Winamp is a popular multimedia player, produced by Nullsoft, which is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files, as well as numerous other formats. A vulnerability exists in the MIDI file parsing component of Nullsoft...

Winamp JPEG和PNG整数溢出漏洞

Bugraq ID: 37387 Winamp是一款流行的媒体播放程序。 Winamp包含的"jpeg.w5s"和"png.w5s"过滤器处理媒体文件中的畸形的JPEG或PNG数据时存在整数溢出，构建恶意MP3诱使用户解析可导致以应用程序权限执行任意指令。 NullSoft Winamp 5.3.2 NullSoft Winamp 5.0 91 NullSoft Winamp 5.0 9 NullSoft Winamp 5.0 8c NullSoft Winamp 5.0 8 NullSoft Winamp 5.0 7 NullSoft Winamp 5.0 6 NullSoft...

Winamp模块解码器插件多个缓冲区溢出漏洞

Bugraq ID: 37374 CVE ID：CVE-2009-3995 CVE-2009-3996 CVE-2009-3997 Winamp是一款流行的媒体播放程序。 Winamp包含多个安全漏洞，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -模块解码器插件INMOD.DLL解析Oktalyzer文件时存在整数溢出，可导致基于堆的缓冲区溢出。 -模块解码器插件INMOD.DLL解析Impulse Tracker文件时存在多个边界错误，可导致基于堆的缓冲区溢出。 -模块解码器插件INMOD.DLL解析Ultratracker文件时存在多个边界错误，可导致基于堆的缓冲区溢出。...

Nullsoft WinAmp Ultravox ultravox-max-msg Header Buffer Overflow (CVE-2006-5567)

NullSoft Winamp is a multimedia player that is capable of playing many formats of audio and video files and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. Ultravox or Ultravox Media On Demand Server UltraMODS is...

Winamp IN_CDDA.dll Buffer Overflow (CVE-2004-1119)

Winamp is a very popular multimedia player, produced by NullSoft, which is capable of playing many formats of audio and video files. One of the audio formats supported by Winamp is Compact-Disc-Digital-Audio CDDA, which is the format used on standard audio Compact Discs CD. When an audio CD is...

Nullsoft Winamp CAF File Processing Integer Overflow (CVE-2009-0186)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading CAF media file which has file extension .caf. A...

SHOUTcast Filename Format String (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

SHOUTcast Filename Format String - ver 2 (CVE-2004-1373)

SHOUTcast is a free distributed streaming audio system developed by Nullsoft. It is widely used by Internet-based radio stations. The SHOUTcast server implements a subset of the HTTP protocol to communicate with clients. A client-server session starts with the client requesting an audio stream fr...

Winamp XM File Heap Buffer Overflow (CVE-2004-1896)

Winamp is a popular media player for the Windows operating system. There is a buffer overflow within the parsing of .XM media files that can lead to arbitrary code execution. There is a buffer overflow in the .XM file type decoded within Winamp, a popular media file player for the Windows Operati...

Nullsoft Winamp AIFF Parsing Heap Buffer Overflow (CVE-2009-0263)

Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files. Winamp can play CD tracks, MP3 music files or MPEG video files as well as numerous other formats. It is also capable of reading AIFF media file which has file extension "aiff". A...

Nullsoft Winamp Ultravox Streaming Metadata Parsing Stack Buffer Overflow (CVE-2008-0065)

NullSoft Winamp is a multimedia player that is capable of playing back many audio/video formats and streaming protocols. Winamp supports the Ultravox media streaming format, a proprietary streaming media protocol developed by AOL. There exists a buffer overflow vulnerability in Nullsoft Winamp...

Integer overflow

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

CVE-2009-1831

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

CVE-2009-1831

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

CVE-2009-1831

The CVE-2009-1831 flaw affects Nullsoft Winamp’s gen_ff.dll in versions before 5.552. It allows a remote attacker to trigger a stack-based buffer overflow while parsing a MAKI file, caused by an incorrect sign extension and an integer overflow. Result: remote code execution or crashes as describe...

CVE-2009-1831: Undefined Security Weakness

The Nullsoft Modern Skins Support module genff.dll in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow...

Nullsoft Winamp 'gen_ff.dll'缓冲区溢出漏洞

Bugraq ID: 35052 CNCAN ID：CNCAN-2009052503 Nullsoft Winamp是一款流行的媒体播放程序。 Nullsoft Winamp处理.maki文件存在一个不正确的类型指派错误，远程攻击者可以利用漏洞进行缓冲区溢出，可能导致以应用程序权限执行任意指令。 当genff.dll处理.maki文件时，读取两个字节并进行符号扩展，导致基于栈的缓冲区溢出，构建恶意文件，诱使用户处理可触发此漏洞。 NullSoft Winamp 5.3.2 NullSoft Winamp 5.0 91 NullSoft Winamp 5.0 9 NullSoft Wina...

Winamp MAKI脚本解析模块栈溢出漏洞

BUGTRAQ ID: 35052 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在解析.maki文件（一种编译过的脚本文件）时没有执行正确的类型赋值，可能导致缓冲区溢出。攻击者可以通过网页或下载对用户提供流行皮肤文件，该皮肤文件利用maki脚本在当前用户环境中执行任意代码。 Winamp的流行皮肤脚本引擎从.maki文件中读取字符串，字符串的格式如下（多字节值为little endian字节序列）： Offset Size Description --------- ------ --------------------------------------...

SHOUTcast服务器DNAS中继远程溢出漏洞

BUGTRAQ ID: 33904 SHOUTcast是一款网络电台服务器软件，由Nullsoft开发。 SHOUTcast在接收中继主服务器的数据时存在缓冲区溢出漏洞，如果SHOUTcast管理员受骗将服务器用作恶意服务器中继的话，接收数据时就可能溢出静态缓冲区，导致执行任意代码。 Nullsoft Shoutcast Server 1.9.8 厂商补丁： Nullsoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.shoutcast.com/...

Update Protection against Nullsoft Winamp AIFF Parsing Heap Buffer Overflow

A vulnerability was reported in Nullsoft Winamp. Nullsoft Winamp is a multimedia player application that is capable of playing many formats of audio and video files, including CD tracks, MP3 music files or MPEG video files as well as numerous other formats. The vulnerability is due to improper...