Winamp "in_midi"组件MIDI时间戳栈缓冲区溢出漏洞

BUGTRAQ ID: 45221 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在实现上存在漏洞，攻击者可利用此漏洞以用户权限在受影响的应用程序中执行任意代码，造成拒绝服务。 此漏洞源于未能对用户提供的数据执行足够的边界检查。Winamp的栈分配是可预测的。攻击者可选择写入到已保存的基本指针的值，因此当恢复了基础指针后，调用函数的栈报文将被移动到攻击者控制的返回地址。 Nullsoft Winamp 5.01 - 5.5.8 厂商补丁： Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Winamp Multiple Vulnerabilities

Winamp is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Winamp 5.6 - MIDI Parser Arbitrary Code Execution

Winamp 5.6 - MIDI Parser Arbitrary Code Execution http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6...

Winamp 5.6 - 'MIDI Parser' Arbitrary Code Execution

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15706.c ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic,...

Winamp < 5.601 MIDI Timestamp Stack Buffer Overflow

Binary data 5726.prm...

Winamp 5.6 Arbitrary Code Execution In MIDI Parser

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-winamp-midi.txt ==-===-=====-=======-===========-=============-================= Winamp 5.6 Arbitrary Code Execution in MIDI Parser Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline...

CVE-2010-4372

Integer overflow in the innsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586...

CVE-2010-4373

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

CVE-2010-4374

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...

CVE-2010-4371

Buffer overflow in the inmod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box...

CVE-2010-2586

Multiple integer overflows in innsv.dll in the innsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents TOC in a 1 NSV stream or 2 NSV file that triggers a heap-based buffer overflow...

Integer overflow

Multiple integer overflows in the inmidi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow...

Design/Logic Flaw

The inmp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via crafted 1 metadata or 2 albumart in an invalid MP4 file...

Design/Logic Flaw

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...

Buffer overflow

Buffer overflow in the inmod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box...

Integer overflow

Integer overflow in the innsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586...

Integer overflow

Multiple integer overflows in innsv.dll in the innsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents TOC in a 1 NSV stream or 2 NSV file that triggers a heap-based buffer overflow...

CVE-2010-4372

Winamp (before 5.6) is affected via the in_nsv plugin, with CVE-2010-4372 describing an integer/heap-based overflow in NSV metadata handling that can be triggered by crafted NSV TOC data. Multiple sources corroborate a similar class of vulnerability affecting in_nsv.dll and NSV streams/files, cap...

CVE-2010-4371

CVE-2010-4371 is a buffer overflow in Winamp’s in_mod plugin (pre-5.6) exploitable via the comment box. The OpenVAS/NVD records confirm the affected component and version range, with the root cause being a buffer overflow in in_mod. Impact is described as unspecified in the source, and no remedia...

CVE-2010-4374

The inmkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service application crash via a Matroska Video MKV file containing a string with a crafted length...