Kryptos Logic Advisory: Winamp 5.6 Arbitrary Code Execution in MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

Winamp Multiple Vulnerabilities

Winamp is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Winamp < 5.601 MIDI Timestamp Stack Buffer Overflow

Binary data 5726.prm...

Winamp 5.6 - MIDI Parser Arbitrary Code Execution

Winamp 5.6 - MIDI Parser Arbitrary Code Execution http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6...

Winamp 5.6 - 'MIDI Parser' Arbitrary Code Execution

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic,...

Winamp 5.6 Arbitrary Code Execution In MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

CVE-2010-4373

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

CVE-2010-4374

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...

CVE-2010-4372

Integer overflow in the innsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586...

CVE-2010-4371

Buffer overflow in the inmod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box...

CVE-2010-2586

Multiple integer overflows in innsv.dll in the innsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents TOC in a 1 NSV stream or 2 NSV file that triggers a heap-based buffer overflow...

Buffer overflow

Buffer overflow in the inmod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box...

Integer overflow

Integer overflow in the innsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586...

Design/Logic Flaw

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...

Design/Logic Flaw

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

Integer overflow

Multiple integer overflows in innsv.dll in the innsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents TOC in a 1 NSV stream or 2 NSV file that triggers a heap-based buffer overflow...

Integer overflow

Multiple integer overflows in the inmidi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow...

CVE-2010-4374

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...

CVE-2010-4370

CVE-2010-4370 affects Winamp through the in_midi plugin, where an integer wrapping/overflow in MIDI parsing can trigger a heap/buffer overflow, enabling remote code execution via a crafted MIDI file. Exploitation context: remote attacker; affected version range: Winamp before 5.6. Mitigation: upg...

CVE-2010-4372

Winamp (before 5.6) is affected via the in_nsv plugin, with CVE-2010-4372 describing an integer/heap-based overflow in NSV metadata handling that can be triggered by crafted NSV TOC data. Multiple sources corroborate a similar class of vulnerability affecting in_nsv.dll and NSV streams/files, cap...